General
-
Target
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e
-
Size
404KB
-
Sample
241111-a44qzsygph
-
MD5
0dc4f1b527d83b3b49f5bacec0b8dfbc
-
SHA1
b250793dd8a07fbd5f505e8875e5b3f956e6aef0
-
SHA256
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e
-
SHA512
7f8b64251a35ae3ff3159454b21514c152843c1ee1f1ed51bdf50f0b1244d67f4022db259b6ed1452c6220158787f9dcb8414a34532a3319a9d6a04583bbb1f9
-
SSDEEP
6144:JjW+ut4Oyy4KS3qyjqqMH2Gis/k6VcUa9DEvuzbgwu6L7ITsqSigaTwVf:pW+c4OyYS6DqthU7vunnn7s
Static task
static1
Behavioral task
behavioral1
Sample
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
udptest
193.56.146.64:65441
-
auth_value
a272f3a2850ec3dccdaed97234b7c40e
Targets
-
-
Target
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e
-
Size
404KB
-
MD5
0dc4f1b527d83b3b49f5bacec0b8dfbc
-
SHA1
b250793dd8a07fbd5f505e8875e5b3f956e6aef0
-
SHA256
c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e
-
SHA512
7f8b64251a35ae3ff3159454b21514c152843c1ee1f1ed51bdf50f0b1244d67f4022db259b6ed1452c6220158787f9dcb8414a34532a3319a9d6a04583bbb1f9
-
SSDEEP
6144:JjW+ut4Oyy4KS3qyjqqMH2Gis/k6VcUa9DEvuzbgwu6L7ITsqSigaTwVf:pW+c4OyYS6DqthU7vunnn7s
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-