General
-
Target
6822eb1aff53fb4bdaea87306e8f9a815f07275e71bd55731fbbaa704f79d369
-
Size
479KB
-
Sample
241111-f33p7atell
-
MD5
6ca5468364f5c18b99ed3093a3a6ab93
-
SHA1
bb9780484558839d5941c7039931bd9515fb51d7
-
SHA256
6822eb1aff53fb4bdaea87306e8f9a815f07275e71bd55731fbbaa704f79d369
-
SHA512
44c32f1f940603e5b2084ace7246c1e1c777e5bfb765143c9098237f9dcaa316e26a05f23f7c62ad03f93137b5b73994d4f1d069b0f482e92ac56ebe7a265e06
-
SSDEEP
12288:XMrEy90jroITXNvu8sayu4QJN8fbn8SVj0jQTa5Jhy:LyDIb4ayLC4n7kQTT
Static task
static1
Behavioral task
behavioral1
Sample
6822eb1aff53fb4bdaea87306e8f9a815f07275e71bd55731fbbaa704f79d369.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
6822eb1aff53fb4bdaea87306e8f9a815f07275e71bd55731fbbaa704f79d369
-
Size
479KB
-
MD5
6ca5468364f5c18b99ed3093a3a6ab93
-
SHA1
bb9780484558839d5941c7039931bd9515fb51d7
-
SHA256
6822eb1aff53fb4bdaea87306e8f9a815f07275e71bd55731fbbaa704f79d369
-
SHA512
44c32f1f940603e5b2084ace7246c1e1c777e5bfb765143c9098237f9dcaa316e26a05f23f7c62ad03f93137b5b73994d4f1d069b0f482e92ac56ebe7a265e06
-
SSDEEP
12288:XMrEy90jroITXNvu8sayu4QJN8fbn8SVj0jQTa5Jhy:LyDIb4ayLC4n7kQTT
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-