General
-
Target
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70
-
Size
377KB
-
Sample
241111-ctmqtszgql
-
MD5
03aec3c674ac9a34b652bb850b800150
-
SHA1
36b6ed3316a3190a2337644248a542d814842cee
-
SHA256
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70
-
SHA512
7bd2d2ae118a836ab661667a909357f71dcc9063c5e978b9b66f19092e3330e5f8faf113994f2213525d1e04f55f83462586b13f67562beadf122868cd8a99cc
-
SSDEEP
6144:vOCJuvrFjDwKvldCYvfONBHrX0ZvImne9UyFi:vOCJuvrFjDwKvldDwBLX0iY+
Static task
static1
Behavioral task
behavioral1
Sample
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ww
193.106.191.67:44400
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
-
Target
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70
-
Size
377KB
-
MD5
03aec3c674ac9a34b652bb850b800150
-
SHA1
36b6ed3316a3190a2337644248a542d814842cee
-
SHA256
121ec64b0d2070950c4623bf36247a07f52e600a3f0b21c15aad2134df5aac70
-
SHA512
7bd2d2ae118a836ab661667a909357f71dcc9063c5e978b9b66f19092e3330e5f8faf113994f2213525d1e04f55f83462586b13f67562beadf122868cd8a99cc
-
SSDEEP
6144:vOCJuvrFjDwKvldCYvfONBHrX0ZvImne9UyFi:vOCJuvrFjDwKvldDwBLX0iY+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-