General
-
Target
1500dedd0da484d89467b757785f1f48fd0ea3a5954a1f1b61818fc3b9decb3b
-
Size
478KB
-
Sample
241111-axqwjsyfma
-
MD5
265a430b6ea2512127fd41a010bd719a
-
SHA1
2e744583264c46adad7e2e87b6249a1b1add0e54
-
SHA256
1500dedd0da484d89467b757785f1f48fd0ea3a5954a1f1b61818fc3b9decb3b
-
SHA512
d5f8556a7e1d6cd480632b44041e31729064f12bcac5024d19aaf5d2bfb02d62ff14427cdd7526f44621b56eed269b43b7177399286f3d656fe952a68dd1ee59
-
SSDEEP
12288:KMrOy90dSV1SqmYXMRkmucZ84SOq56ICQj:MylV1v8RkP54SxBH
Static task
static1
Behavioral task
behavioral1
Sample
1500dedd0da484d89467b757785f1f48fd0ea3a5954a1f1b61818fc3b9decb3b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fusa
193.233.20.12:4132
-
auth_value
a08b2f01bd2af756e38c5dd60e87e697
Targets
-
-
Target
1500dedd0da484d89467b757785f1f48fd0ea3a5954a1f1b61818fc3b9decb3b
-
Size
478KB
-
MD5
265a430b6ea2512127fd41a010bd719a
-
SHA1
2e744583264c46adad7e2e87b6249a1b1add0e54
-
SHA256
1500dedd0da484d89467b757785f1f48fd0ea3a5954a1f1b61818fc3b9decb3b
-
SHA512
d5f8556a7e1d6cd480632b44041e31729064f12bcac5024d19aaf5d2bfb02d62ff14427cdd7526f44621b56eed269b43b7177399286f3d656fe952a68dd1ee59
-
SSDEEP
12288:KMrOy90dSV1SqmYXMRkmucZ84SOq56ICQj:MylV1v8RkP54SxBH
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-