General
-
Target
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7
-
Size
411KB
-
Sample
241111-c678as1enb
-
MD5
0ccf37feac51b85c2adcc0fed8597fdf
-
SHA1
b338167ee881d71f79ecd1ddc863db9e9332d6ed
-
SHA256
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7
-
SHA512
c4fc90ec0f514278b55799cb90c4797f5a8f9c16fe67543fb6fe28c883441ea6b56e2e9efde9ef4fd55988bfdf0efdc42e23ce1c9ff33dc5e05b317a9c739569
-
SSDEEP
12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL
Static task
static1
Behavioral task
behavioral1
Sample
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
170
45.9.20.240:46257
-
auth_value
73f905977a8199ea3d396a0a7d0ae6c8
Targets
-
-
Target
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7
-
Size
411KB
-
MD5
0ccf37feac51b85c2adcc0fed8597fdf
-
SHA1
b338167ee881d71f79ecd1ddc863db9e9332d6ed
-
SHA256
df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7
-
SHA512
c4fc90ec0f514278b55799cb90c4797f5a8f9c16fe67543fb6fe28c883441ea6b56e2e9efde9ef4fd55988bfdf0efdc42e23ce1c9ff33dc5e05b317a9c739569
-
SSDEEP
12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-