General
-
Target
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd
-
Size
293KB
-
Sample
241110-z1tjaavfkn
-
MD5
33a654009567c69afef9acf5249eecd0
-
SHA1
5a1c870233a75e5f44725e2d2633e374bfda904d
-
SHA256
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd
-
SHA512
f1a29b179e419ef5e55ca26e00741854299df8eefba0ab8ae149fab87ece81590c873c90d2a8b265e8d1694b251ecf4c0303904396fecd2758347ddacc9ca190
-
SSDEEP
6144:JL0WbINz35Zf9eCHBlO8gzx/PAqqVZ1KjEnL6nYen8g9uzbgwu:JQWb8fAgXO8IPAq+ZQj+6YeP9unn
Static task
static1
Behavioral task
behavioral1
Sample
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ww
45.9.20.168:46257
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
-
Target
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd
-
Size
293KB
-
MD5
33a654009567c69afef9acf5249eecd0
-
SHA1
5a1c870233a75e5f44725e2d2633e374bfda904d
-
SHA256
5d16ac2032a7343964f0896a0e6a646e57a2f156d92ed36e49f1d31b982b5bdd
-
SHA512
f1a29b179e419ef5e55ca26e00741854299df8eefba0ab8ae149fab87ece81590c873c90d2a8b265e8d1694b251ecf4c0303904396fecd2758347ddacc9ca190
-
SSDEEP
6144:JL0WbINz35Zf9eCHBlO8gzx/PAqqVZ1KjEnL6nYen8g9uzbgwu:JQWb8fAgXO8IPAq+ZQj+6YeP9unn
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-