General
-
Target
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8.exe
-
Size
175KB
-
Sample
241112-gntdmswfqm
-
MD5
7f4865374631184f0ba8fb7d3ab80f3d
-
SHA1
989f91512babb85dc5247300fb100af5bdea34b8
-
SHA256
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8
-
SHA512
bc533d756ea98317e9e96af0b454674c6c5c6d7c4bf8836bd0371f309a0fdb54f63a787dd72a5af1fd110955e5599a061c93a2ace023fedd4a061f6a7124a704
-
SSDEEP
3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOL:mqZg/Z6XJIihM
Behavioral task
behavioral1
Sample
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
from
176.113.115.145:4125
-
auth_value
8633e283485822a4a48f0a41d5397566
Targets
-
-
Target
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8.exe
-
Size
175KB
-
MD5
7f4865374631184f0ba8fb7d3ab80f3d
-
SHA1
989f91512babb85dc5247300fb100af5bdea34b8
-
SHA256
912bc15b12fabbee3064a24f118138778a3de33f69a0e570ace471e02d1870f8
-
SHA512
bc533d756ea98317e9e96af0b454674c6c5c6d7c4bf8836bd0371f309a0fdb54f63a787dd72a5af1fd110955e5599a061c93a2ace023fedd4a061f6a7124a704
-
SSDEEP
3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOL:mqZg/Z6XJIihM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-