General
-
Target
65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe
-
Size
352KB
-
Sample
241111-awszhsyclm
-
MD5
f425b13be6e3a3359d4287603a1e1d7a
-
SHA1
df7621b9d1388ab592da7621b9517ae6eb8e86b2
-
SHA256
1752ae70f16d983129d6902b71581d240ee6d607fc815f20e122d76ab49b86af
-
SHA512
a9babd05914dcd8c23f759b582e9c2b3cf9a94f2989579cdabe2877e15000592345c3daada4933cc09eeda154a26f05cafce2c6546344c147057b21986ee2bfe
-
SSDEEP
6144:NP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjte:NBZoJ3rU6RH/wjjGte
Static task
static1
Behavioral task
behavioral1
Sample
65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe
-
Size
352KB
-
MD5
f425b13be6e3a3359d4287603a1e1d7a
-
SHA1
df7621b9d1388ab592da7621b9517ae6eb8e86b2
-
SHA256
1752ae70f16d983129d6902b71581d240ee6d607fc815f20e122d76ab49b86af
-
SHA512
a9babd05914dcd8c23f759b582e9c2b3cf9a94f2989579cdabe2877e15000592345c3daada4933cc09eeda154a26f05cafce2c6546344c147057b21986ee2bfe
-
SSDEEP
6144:NP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjte:NBZoJ3rU6RH/wjjGte
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-