General
-
Target
36dee419fb6d3433133a3ff56c3cbf03165f01b034270d296015b69ad7fc7fee
-
Size
479KB
-
Sample
241111-f43ftatemq
-
MD5
3a684ef598e045fe59f7e0a797f3faae
-
SHA1
f2c365543828085ab001553072c7c0c77d965f3c
-
SHA256
36dee419fb6d3433133a3ff56c3cbf03165f01b034270d296015b69ad7fc7fee
-
SHA512
e8c74ff604686f5f0444a3a1a7d48ab2cab4e4cba906fc7ca51800edc5a25225b3ead10653bced394a764ba368c0018dcc765a2a6c9da7bdf46022ca93a67a62
-
SSDEEP
12288:wMrSy90L4LGatkMse+MJFTC0rWG+grlI:yyvLuelTRWWI
Static task
static1
Behavioral task
behavioral1
Sample
36dee419fb6d3433133a3ff56c3cbf03165f01b034270d296015b69ad7fc7fee.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
daris
217.196.96.56:4138
-
auth_value
3491f24ae0250969cd45ce4b3fe77549
Targets
-
-
Target
36dee419fb6d3433133a3ff56c3cbf03165f01b034270d296015b69ad7fc7fee
-
Size
479KB
-
MD5
3a684ef598e045fe59f7e0a797f3faae
-
SHA1
f2c365543828085ab001553072c7c0c77d965f3c
-
SHA256
36dee419fb6d3433133a3ff56c3cbf03165f01b034270d296015b69ad7fc7fee
-
SHA512
e8c74ff604686f5f0444a3a1a7d48ab2cab4e4cba906fc7ca51800edc5a25225b3ead10653bced394a764ba368c0018dcc765a2a6c9da7bdf46022ca93a67a62
-
SSDEEP
12288:wMrSy90L4LGatkMse+MJFTC0rWG+grlI:yyvLuelTRWWI
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-