General
-
Target
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde
-
Size
314KB
-
Sample
241111-gj1bdsxngj
-
MD5
280934194743cba57251c37e2cb0d4f3
-
SHA1
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde
-
SHA256
8af5f51f2b3232a66c0c473c368e4f01ceeac9c22f7b2ab51c73db0cf28dc9e2
-
SHA512
bef7217ae9311abff0e505ba6f5dd82f93e03cb2e35c22667437d0f30f6bf7dc39fe9e5f2d33bd5032aaba97e5c0b168de2e8cb0fc32102e42543a839e364c6e
-
SSDEEP
6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
Static task
static1
Behavioral task
behavioral1
Sample
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
123
78.153.144.3:2510
-
auth_value
cd6abb0af211bce081d7bf127cc26835
Targets
-
-
Target
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde
-
Size
314KB
-
MD5
280934194743cba57251c37e2cb0d4f3
-
SHA1
6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde
-
SHA256
8af5f51f2b3232a66c0c473c368e4f01ceeac9c22f7b2ab51c73db0cf28dc9e2
-
SHA512
bef7217ae9311abff0e505ba6f5dd82f93e03cb2e35c22667437d0f30f6bf7dc39fe9e5f2d33bd5032aaba97e5c0b168de2e8cb0fc32102e42543a839e364c6e
-
SSDEEP
6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-