General
-
Target
c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe
-
Size
283KB
-
Sample
241112-jwxr5sycmd
-
MD5
7d63c8f6afb817024c6b979dcd1c71eb
-
SHA1
d0eb4f8b625dca30049cfd38455181fc91e0471a
-
SHA256
a2932373b4900d948624e3f4d17e18040cb023d358e130e98ebe3bc92ba1be07
-
SHA512
b7776f149c01c9a73588a9751d50ac8cd4e9b465d5aa2096f53bc1cff48ee65616a622cb80d1cc5a607220058941321ad047018aeb39f2382a751d5580f5a0fe
-
SSDEEP
6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJy:pAqeSD8ftRhkHIJyjRm
Static task
static1
Behavioral task
behavioral1
Sample
c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe
-
Size
283KB
-
MD5
7d63c8f6afb817024c6b979dcd1c71eb
-
SHA1
d0eb4f8b625dca30049cfd38455181fc91e0471a
-
SHA256
a2932373b4900d948624e3f4d17e18040cb023d358e130e98ebe3bc92ba1be07
-
SHA512
b7776f149c01c9a73588a9751d50ac8cd4e9b465d5aa2096f53bc1cff48ee65616a622cb80d1cc5a607220058941321ad047018aeb39f2382a751d5580f5a0fe
-
SSDEEP
6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJy:pAqeSD8ftRhkHIJyjRm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-