General
-
Target
1cf6728114b3efa0d3030500581ed5fed93d5d40f98edf1d2a99869a22937f5e
-
Size
297KB
-
Sample
241111-ay4h2aycnq
-
MD5
37eb92ccf25be89c122221b818239dbd
-
SHA1
939835a2afabcd9d651a52179c513c8975c0869f
-
SHA256
1cf6728114b3efa0d3030500581ed5fed93d5d40f98edf1d2a99869a22937f5e
-
SHA512
0b922afb8184fd6702fc91872b4c0cb210517b1a220fe6b0adc279cdd549f210f0eac51bb2d569ed48eb05d591a0deb5cf20872ad807dbe2d054015afa7ced55
-
SSDEEP
6144:veDYTC1NS0cq3v9mVk58x33Qj5RSM4s20YZR8X0wyz1UhiSZm8v:G0Gf7v4k582+s3Y4KzOBZmS
Static task
static1
Behavioral task
behavioral1
Sample
e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@2023@New
91.215.85.155:32796
-
auth_value
0be5b9b84cd5b707e91a48e341e3f7d7
Targets
-
-
Target
e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23
-
Size
398KB
-
MD5
e2fbefdeabcf9efdaa69ff6039106b99
-
SHA1
e26b3064f704e5eee3d87ad6a4e3c68ea3be7797
-
SHA256
e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23
-
SHA512
2b2e7c446286f9e63d35c409204d4db72299250e1f0bbe6bdd1639854bc89b7b530df34ed50d130e7ea3421a940fdd7d55c09cb86f7335733fe5ce2330729d6a
-
SSDEEP
6144:yLLYV4vNS0cq3t9mVk58x13Qj5RSo4s20YZc58xQ3xDPkMo5zXbAc:IkK7v6k58UgspYe58xaxDPyrbA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-