General
-
Target
40f09c0db194b695f62eac9880860099b3657f0b229a9c8ed5b23125a03ded42
-
Size
50KB
-
Sample
241111-cq7ltszgjm
-
MD5
ebe75c220c7377d2facd21a48dfbdd43
-
SHA1
2d7a3a9ad7aec1909022a0e6bc3ce5cbff9aac96
-
SHA256
40f09c0db194b695f62eac9880860099b3657f0b229a9c8ed5b23125a03ded42
-
SHA512
52f3aba7b7403d6ebd9ddbfd6e7268ea89c6a6bf4b7fe3f0d9c7850425a05ce7f63aaeadb7f72a06b9e3eb6dda253b573123f4469c981518476d4cdb2607bcca
-
SSDEEP
1536:1F5xGGHW+5XV17pTHUG7VqXDtgPsYOtAf:H5xGf+5F1pH77VqaPsjs
Behavioral task
behavioral1
Sample
9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
Mine
31.41.244.186:4683
-
auth_value
1b1e48ccc6e0797e3ac231cfeb9919b9
Targets
-
-
Target
9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c
-
Size
175KB
-
MD5
0e068405ce30f54e043ab2c3841efe78
-
SHA1
74cc1bcda934bdc8c406cb5d126917d559b15bf6
-
SHA256
9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c
-
SHA512
0cb861ade2f50f3380b7b66ea62acf4a37c76e09360311a969db20cfa46890a968a6420304ef7853a1174b39c979a1ed431d62ad35217c06a3635eff3d36bdea
-
SSDEEP
3072:vxqZWJBaKULo37yEWGljSesSFIhYvTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0k:ZqZI7yEWY3Ihy
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-