General
-
Target
2b8de63efc73f6f90b4eba5b5ebf8e23
-
Size
325KB
-
Sample
241111-c1w8vatpfm
-
MD5
2b8de63efc73f6f90b4eba5b5ebf8e23
-
SHA1
9cc420b9269bd8f652c883b1728cc046a3d1ce57
-
SHA256
635d7344172e638eb39201f53f7dcb1c0781dff718425b59913323488b7d39ed
-
SHA512
aadbf291e79a15172d44bfb6d59ebbcd833672ed5a5b3b18c9c8507aa95dd7901201599a2a7bf7d92194daf3a2762939e3d266fc148c01765322ebbd25f7842d
-
SSDEEP
6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm
Static task
static1
Behavioral task
behavioral1
Sample
2b8de63efc73f6f90b4eba5b5ebf8e23.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2b8de63efc73f6f90b4eba5b5ebf8e23.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
TripleSBanks
185.143.223.90:10024
-
auth_value
064872fe393e6f3a6d60eca59269d528
Targets
-
-
Target
2b8de63efc73f6f90b4eba5b5ebf8e23
-
Size
325KB
-
MD5
2b8de63efc73f6f90b4eba5b5ebf8e23
-
SHA1
9cc420b9269bd8f652c883b1728cc046a3d1ce57
-
SHA256
635d7344172e638eb39201f53f7dcb1c0781dff718425b59913323488b7d39ed
-
SHA512
aadbf291e79a15172d44bfb6d59ebbcd833672ed5a5b3b18c9c8507aa95dd7901201599a2a7bf7d92194daf3a2762939e3d266fc148c01765322ebbd25f7842d
-
SSDEEP
6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-