General
-
Target
121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd
-
Size
1.1MB
-
Sample
241110-znt92svgjd
-
MD5
61f8e650590ea6ba64069a4033c8e6c8
-
SHA1
a71242eb060f3949929c85d07070c1caab327556
-
SHA256
121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd
-
SHA512
c12c61af9240bfd052e351994b70df6589f672b74c480e9434c5ec53465059584d1d41bc0692f6bcf0a794e97efa56479c1e95948a40d266ed5943e956ac63ae
-
SSDEEP
24576:ryVn1icWxWwxX30DF6QRLMc0PnyqGueaUjl:eVUtn05vwFPnyq7e7
Static task
static1
Behavioral task
behavioral1
Sample
121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd
-
Size
1.1MB
-
MD5
61f8e650590ea6ba64069a4033c8e6c8
-
SHA1
a71242eb060f3949929c85d07070c1caab327556
-
SHA256
121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd
-
SHA512
c12c61af9240bfd052e351994b70df6589f672b74c480e9434c5ec53465059584d1d41bc0692f6bcf0a794e97efa56479c1e95948a40d266ed5943e956ac63ae
-
SSDEEP
24576:ryVn1icWxWwxX30DF6QRLMc0PnyqGueaUjl:eVUtn05vwFPnyq7e7
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-