General
-
Target
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db
-
Size
273KB
-
Sample
241111-aqhatsxpbx
-
MD5
7f69b55bb25882c205d026d6df032647
-
SHA1
c644816f2ce395c84768095e0024e4ca84e1b9e1
-
SHA256
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db
-
SHA512
42ba7cfb788330132833b00a22a469e039cbd769b9c7e1d02e8b9be52a695a9d8d3ade08e501048515f7c08f13d9553a602cd2ee996846491fc39bf90dbfabb9
-
SSDEEP
6144:bdqL9TqYimTVI7rSr3n8NJpH0HtDZkuuIgZuUjptNrmCdT6VwLB:ZqJTq0TwQ8NJpH0NFkuyN9frmCde6L
Static task
static1
Behavioral task
behavioral1
Sample
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.240:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db
-
Size
273KB
-
MD5
7f69b55bb25882c205d026d6df032647
-
SHA1
c644816f2ce395c84768095e0024e4ca84e1b9e1
-
SHA256
6ac4e3cd921f131a8a8fc4b285eed173fc10b2a0d5f3ff6093775b487e6186db
-
SHA512
42ba7cfb788330132833b00a22a469e039cbd769b9c7e1d02e8b9be52a695a9d8d3ade08e501048515f7c08f13d9553a602cd2ee996846491fc39bf90dbfabb9
-
SSDEEP
6144:bdqL9TqYimTVI7rSr3n8NJpH0HtDZkuuIgZuUjptNrmCdT6VwLB:ZqJTq0TwQ8NJpH0NFkuyN9frmCde6L
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-