General
-
Target
7f112eae96e60e1e4b2428e255097329312874605766f789c630a663b8b0d574
-
Size
566KB
-
Sample
241111-e266jssgmq
-
MD5
4acd7cb8ba4f991136a4034983994a2e
-
SHA1
08e573339181465569095ce7b8b637b44cca7d4e
-
SHA256
7f112eae96e60e1e4b2428e255097329312874605766f789c630a663b8b0d574
-
SHA512
be483cc561a562e7a62ebdba82eb71dae18662303de669336e86b4ad4eb5de1430e1196d524cf0e81e90dda67818eae86a4967f94183a0a23812513e86c664f7
-
SSDEEP
12288:eMrZy90Iy1qAA5ZGkHm8cNNcXvrl7KaGAD4pfZAuv:ny333lm86qJXGUa
Static task
static1
Behavioral task
behavioral1
Sample
7f112eae96e60e1e4b2428e255097329312874605766f789c630a663b8b0d574.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
darm
217.196.96.56:4138
-
auth_value
d88ac8ccc04ab9979b04b46313db1648
Targets
-
-
Target
7f112eae96e60e1e4b2428e255097329312874605766f789c630a663b8b0d574
-
Size
566KB
-
MD5
4acd7cb8ba4f991136a4034983994a2e
-
SHA1
08e573339181465569095ce7b8b637b44cca7d4e
-
SHA256
7f112eae96e60e1e4b2428e255097329312874605766f789c630a663b8b0d574
-
SHA512
be483cc561a562e7a62ebdba82eb71dae18662303de669336e86b4ad4eb5de1430e1196d524cf0e81e90dda67818eae86a4967f94183a0a23812513e86c664f7
-
SSDEEP
12288:eMrZy90Iy1qAA5ZGkHm8cNNcXvrl7KaGAD4pfZAuv:ny333lm86qJXGUa
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-