General
-
Target
d8ac674a7f77d2f44b670a9137761dd2
-
Size
364KB
-
Sample
241110-xpharssma1
-
MD5
d8ac674a7f77d2f44b670a9137761dd2
-
SHA1
d82b2b60a2cd149c65446ad7512494fafe125c59
-
SHA256
bab472575179e7c0447f257ced7932763e32811fe4d9794314e2c08393bf0e92
-
SHA512
72ed1f3107d5ba131ad3d48c1cb80b62b485c77bb999e253b76c015d423abeb20cf0dd150e44be1d64d8f59c02cdaf3925135a8de1faa6fffe4b8b5be5845d28
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Behavioral task
behavioral1
Sample
d8ac674a7f77d2f44b670a9137761dd2.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
d8ac674a7f77d2f44b670a9137761dd2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
0002
13.72.81.58:13413
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
-
Target
d8ac674a7f77d2f44b670a9137761dd2
-
Size
364KB
-
MD5
d8ac674a7f77d2f44b670a9137761dd2
-
SHA1
d82b2b60a2cd149c65446ad7512494fafe125c59
-
SHA256
bab472575179e7c0447f257ced7932763e32811fe4d9794314e2c08393bf0e92
-
SHA512
72ed1f3107d5ba131ad3d48c1cb80b62b485c77bb999e253b76c015d423abeb20cf0dd150e44be1d64d8f59c02cdaf3925135a8de1faa6fffe4b8b5be5845d28
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-