General
-
Target
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968
-
Size
272KB
-
Sample
241111-aqymtaxpcw
-
MD5
ab3acbb75652a011d8ea2ea11d5d16bb
-
SHA1
125791b7cfe190bb421759d34da9c7953c0ce0eb
-
SHA256
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968
-
SHA512
efbe7f42faaa202200e720843a3a003c4a714630880d76f3d7530027d3c7d05ff4ef4c12b65df4f8b7056b612fc4c8e40f56dc3ed2be4aa51cb5fee0c6027d38
-
SSDEEP
3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz
Behavioral task
behavioral1
Sample
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ruma
193.233.20.13:4136
-
auth_value
647d00dfaba082a4a30f383bca5d1a2a
Targets
-
-
Target
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968
-
Size
272KB
-
MD5
ab3acbb75652a011d8ea2ea11d5d16bb
-
SHA1
125791b7cfe190bb421759d34da9c7953c0ce0eb
-
SHA256
49ad755a1d347efca9bd8cdf757067c0ce1b8d74e5b1d5119ceed1a2946d6968
-
SHA512
efbe7f42faaa202200e720843a3a003c4a714630880d76f3d7530027d3c7d05ff4ef4c12b65df4f8b7056b612fc4c8e40f56dc3ed2be4aa51cb5fee0c6027d38
-
SSDEEP
3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-