General
-
Target
afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12.exe
-
Size
370KB
-
Sample
241111-c53anaznfz
-
MD5
176dffce379eb75cb0bc46b86733784a
-
SHA1
d56563f5e24b6851cb1a2aa24b99f33b5ebb8bd1
-
SHA256
afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12
-
SHA512
f821e78390492929166dddc95562136dba243b9158bfc43b3c6210b828247cf63473f8ad6167d8b522c090ee5b2efa1e69bf275c22a4d67d886b301ca68915fa
-
SSDEEP
6144:vZp0yN90QEEmKItMqxYrC7XY+1B7Tzi3pSH92wLPFTXjxAGA:My90+SSEXE+1B+pjwLwGA
Static task
static1
Behavioral task
behavioral1
Sample
afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12.exe
-
Size
370KB
-
MD5
176dffce379eb75cb0bc46b86733784a
-
SHA1
d56563f5e24b6851cb1a2aa24b99f33b5ebb8bd1
-
SHA256
afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12
-
SHA512
f821e78390492929166dddc95562136dba243b9158bfc43b3c6210b828247cf63473f8ad6167d8b522c090ee5b2efa1e69bf275c22a4d67d886b301ca68915fa
-
SSDEEP
6144:vZp0yN90QEEmKItMqxYrC7XY+1B7Tzi3pSH92wLPFTXjxAGA:My90+SSEXE+1B+pjwLwGA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-