General
-
Target
f4a1d3118e8550dbc36aa8743c9cbffae0b0d14be9eced3e9c50be9a5bd7a59fN.exe
-
Size
175KB
-
Sample
241111-aw5nba1qgj
-
MD5
46ff36e4001a718e62fd851eb832af57
-
SHA1
0720c5030be606a8ab79a96b37263b9db249739c
-
SHA256
1be6516ce5a79bee97300c4e7d297d70b283435e938ed8091166af720251ca71
-
SHA512
5423698618ff1fce1275aa7d18718671ccfdd6f3b66233fb9bdd2e9beb5b84c08350846b04d5bcf5d4221223be7f201931dc3c015311a5ccaef2c4a4aa0b05ed
-
SSDEEP
3072:UxqZWJBaKULo3P/UxljLezBFAhovTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0j6:qqZIP/UnKAhib
Behavioral task
behavioral1
Sample
f4a1d3118e8550dbc36aa8743c9cbffae0b0d14be9eced3e9c50be9a5bd7a59fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4a1d3118e8550dbc36aa8743c9cbffae0b0d14be9eced3e9c50be9a5bd7a59fN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
frukt
193.233.20.23:4124
-
auth_value
06c91230f673ef9b659f23ab41313be0
Targets
-
-
Target
f4a1d3118e8550dbc36aa8743c9cbffae0b0d14be9eced3e9c50be9a5bd7a59fN.exe
-
Size
175KB
-
MD5
46ff36e4001a718e62fd851eb832af57
-
SHA1
0720c5030be606a8ab79a96b37263b9db249739c
-
SHA256
1be6516ce5a79bee97300c4e7d297d70b283435e938ed8091166af720251ca71
-
SHA512
5423698618ff1fce1275aa7d18718671ccfdd6f3b66233fb9bdd2e9beb5b84c08350846b04d5bcf5d4221223be7f201931dc3c015311a5ccaef2c4a4aa0b05ed
-
SSDEEP
3072:UxqZWJBaKULo3P/UxljLezBFAhovTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0j6:qqZIP/UnKAhib
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-