General
-
Target
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f
-
Size
302KB
-
Sample
241111-bm9fkszcka
-
MD5
36299d75238e7207fea20131b3bc4aa2
-
SHA1
8c2ca3f306cf06885160b4177572918d0e018e6c
-
SHA256
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f
-
SHA512
0eeac9949e0a95a42bcf5226575d8419685d963b2a9b49fb634dd79bed9ed48825f853a8be63c2aed47d3c26b47b0dcb6d2aec0c3f0ccef8efe98f6f9110fa6d
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Static task
static1
Behavioral task
behavioral1
Sample
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f
-
Size
302KB
-
MD5
36299d75238e7207fea20131b3bc4aa2
-
SHA1
8c2ca3f306cf06885160b4177572918d0e018e6c
-
SHA256
d1910629542c3cdc61774d1a8a3663556bc681d8018087e4978c1e9fc9e5f29f
-
SHA512
0eeac9949e0a95a42bcf5226575d8419685d963b2a9b49fb634dd79bed9ed48825f853a8be63c2aed47d3c26b47b0dcb6d2aec0c3f0ccef8efe98f6f9110fa6d
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-