General
-
Target
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe
-
Size
176KB
-
Sample
241111-cfqwbsyre1
-
MD5
4492c25f21b82d16ad5394c2b596ceb0
-
SHA1
6094ac1b1f6adbc284c3d6ac271815917fdd802d
-
SHA256
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba
-
SHA512
8710295523505b0a1865a430a4669cfe9e41a1bf7f25e4956f7c6cfcf72dcd1a78f1312fe63df250a3754b712a0b4231da09b03045b92ef59f58a8b657a9b37b
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOB:oqZVTPfBbXhA
Behavioral task
behavioral1
Sample
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dunkan
193.233.20.24:4123
-
auth_value
505c396c57c6287fc3fdc5f3aeab0819
Targets
-
-
Target
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe
-
Size
176KB
-
MD5
4492c25f21b82d16ad5394c2b596ceb0
-
SHA1
6094ac1b1f6adbc284c3d6ac271815917fdd802d
-
SHA256
8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba
-
SHA512
8710295523505b0a1865a430a4669cfe9e41a1bf7f25e4956f7c6cfcf72dcd1a78f1312fe63df250a3754b712a0b4231da09b03045b92ef59f58a8b657a9b37b
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOB:oqZVTPfBbXhA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-