General
-
Target
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b
-
Size
405KB
-
Sample
241110-z5hycawarh
-
MD5
dda058b553d0d0206023e197ea9a7d4f
-
SHA1
8ecd160d6f3718863af5b314ea7a8422580b3e0f
-
SHA256
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b
-
SHA512
473495e31b5bd7f20fb55826e8c3fdfb2ffb22ead5805960247b8cfc71029630c9ea23a81a8125d215d3b7e04601430d496b510d1b2e4ca60d6a7871666b0ded
-
SSDEEP
6144:/NL2AtpZGAxNNEuPbkxC+XrTko6FtAK/tZs/ITLR12H7+NtDDTS:/NL2Y/GAxNNEZC4V6kmZeIL2HAzS
Static task
static1
Behavioral task
behavioral1
Sample
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b
-
Size
405KB
-
MD5
dda058b553d0d0206023e197ea9a7d4f
-
SHA1
8ecd160d6f3718863af5b314ea7a8422580b3e0f
-
SHA256
3359d4d2ee1516c2914d41336ada7841364b9694f3ff3930ab3330ed7054c90b
-
SHA512
473495e31b5bd7f20fb55826e8c3fdfb2ffb22ead5805960247b8cfc71029630c9ea23a81a8125d215d3b7e04601430d496b510d1b2e4ca60d6a7871666b0ded
-
SSDEEP
6144:/NL2AtpZGAxNNEuPbkxC+XrTko6FtAK/tZs/ITLR12H7+NtDDTS:/NL2Y/GAxNNEZC4V6kmZeIL2HAzS
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-