General
-
Target
4da1b91c46e6b3fd60c91a3407f7b6c534f8fc40810bd251f13da4b67c83d226
-
Size
440KB
-
Sample
241111-kej1dszmgn
-
MD5
776c7d7cfb59e503d7a97e34744c0f66
-
SHA1
7425b0cfba6c69f01b3acc01d98095c3f70bcef7
-
SHA256
4da1b91c46e6b3fd60c91a3407f7b6c534f8fc40810bd251f13da4b67c83d226
-
SHA512
261df1a3bc5f57646bd5143c59827d7a4daf1091567657a8764574804a5879c9324bb96d2ee62b682a566cbc6afa8f32ad28af4a54b84cf3d39bb98fa30de88f
-
SSDEEP
12288:JMrqy90sp7cO1Wt4uTY7mhTAFlj+jWSdPvBY:jyJcO+4IcF+jxc
Static task
static1
Behavioral task
behavioral1
Sample
4da1b91c46e6b3fd60c91a3407f7b6c534f8fc40810bd251f13da4b67c83d226.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rodik
193.233.20.23:4124
-
auth_value
59b6e22e7cfd9b5fa0c99d1942f7c85d
Targets
-
-
Target
4da1b91c46e6b3fd60c91a3407f7b6c534f8fc40810bd251f13da4b67c83d226
-
Size
440KB
-
MD5
776c7d7cfb59e503d7a97e34744c0f66
-
SHA1
7425b0cfba6c69f01b3acc01d98095c3f70bcef7
-
SHA256
4da1b91c46e6b3fd60c91a3407f7b6c534f8fc40810bd251f13da4b67c83d226
-
SHA512
261df1a3bc5f57646bd5143c59827d7a4daf1091567657a8764574804a5879c9324bb96d2ee62b682a566cbc6afa8f32ad28af4a54b84cf3d39bb98fa30de88f
-
SSDEEP
12288:JMrqy90sp7cO1Wt4uTY7mhTAFlj+jWSdPvBY:jyJcO+4IcF+jxc
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-