General
-
Target
676914e25da081e7965129fd42d39dc396adc81b3fb491e4590a7873f9b6ab47
-
Size
433KB
-
Sample
241110-zxxfrsvhqb
-
MD5
eb26b2cd8012751d892537c3632820d2
-
SHA1
d142e831750ae9aab2e1e07c99fac2ab2181e9d5
-
SHA256
676914e25da081e7965129fd42d39dc396adc81b3fb491e4590a7873f9b6ab47
-
SHA512
b4816bfd847c6425cb1b0a534a52241a044c2f18a30080d909022c6c556bf88159391d4a036cdf08911879b772b952715fded73bb35031e34615811d8962548d
-
SSDEEP
12288:pMrry90a78bm8q4pif/DdRm19HgnHkXM0Lk:CyamX7Dd0XAEcok
Static task
static1
Behavioral task
behavioral1
Sample
676914e25da081e7965129fd42d39dc396adc81b3fb491e4590a7873f9b6ab47.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rodik
193.233.20.23:4124
-
auth_value
59b6e22e7cfd9b5fa0c99d1942f7c85d
Targets
-
-
Target
676914e25da081e7965129fd42d39dc396adc81b3fb491e4590a7873f9b6ab47
-
Size
433KB
-
MD5
eb26b2cd8012751d892537c3632820d2
-
SHA1
d142e831750ae9aab2e1e07c99fac2ab2181e9d5
-
SHA256
676914e25da081e7965129fd42d39dc396adc81b3fb491e4590a7873f9b6ab47
-
SHA512
b4816bfd847c6425cb1b0a534a52241a044c2f18a30080d909022c6c556bf88159391d4a036cdf08911879b772b952715fded73bb35031e34615811d8962548d
-
SSDEEP
12288:pMrry90a78bm8q4pif/DdRm19HgnHkXM0Lk:CyamX7Dd0XAEcok
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-