General
-
Target
8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557
-
Size
1.5MB
-
Sample
241111-abbjqs1map
-
MD5
cf9935de9ba543d86b222e598e9a5be1
-
SHA1
7655428e838bfd355d48a2c5ba34596bcf641944
-
SHA256
8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557
-
SHA512
fab841acbb5dfaac68dbb90a2b4d42d634a2cfc70e0dc173e6ce0ec9f417eeaa5c6443c97c53aac69939e23477390219cac8ca092b927ec2673db4de9c20dad7
-
SSDEEP
24576:MyPfqZApjccVe9s9h7tTFu2KuINsY4nyd8goJIJXwh8Deo46sY1/7iD1dduS86rk:7PfqZej1e9KhRTQcKGI8gs0Xx6oUOg1a
Static task
static1
Behavioral task
behavioral1
Sample
8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557
-
Size
1.5MB
-
MD5
cf9935de9ba543d86b222e598e9a5be1
-
SHA1
7655428e838bfd355d48a2c5ba34596bcf641944
-
SHA256
8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557
-
SHA512
fab841acbb5dfaac68dbb90a2b4d42d634a2cfc70e0dc173e6ce0ec9f417eeaa5c6443c97c53aac69939e23477390219cac8ca092b927ec2673db4de9c20dad7
-
SSDEEP
24576:MyPfqZApjccVe9s9h7tTFu2KuINsY4nyd8goJIJXwh8Deo46sY1/7iD1dduS86rk:7PfqZej1e9KhRTQcKGI8gs0Xx6oUOg1a
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-