General
-
Target
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2
-
Size
370KB
-
Sample
241111-lf7nhsxcrq
-
MD5
4dfcd0cb9e79e7922508c89101402ce5
-
SHA1
ecb081f6bdbaf76493fe3a666d24eab5e5b977ea
-
SHA256
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2
-
SHA512
b53c720eacbf832b4dee2fd30b0af999e01026686da2c584907b5a66edc7c662630f28d632201f9fc83530499f67aba288758bb606909876b2d9860745fe50c4
-
SSDEEP
6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R
Static task
static1
Behavioral task
behavioral1
Sample
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2
-
Size
370KB
-
MD5
4dfcd0cb9e79e7922508c89101402ce5
-
SHA1
ecb081f6bdbaf76493fe3a666d24eab5e5b977ea
-
SHA256
28b68de1180c7e1db07aeb6a89c7e1e51abe777c01cd194ab8d69f1239e3a6b2
-
SHA512
b53c720eacbf832b4dee2fd30b0af999e01026686da2c584907b5a66edc7c662630f28d632201f9fc83530499f67aba288758bb606909876b2d9860745fe50c4
-
SSDEEP
6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-