General
-
Target
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe
-
Size
420KB
-
Sample
241113-14e1qstnal
-
MD5
4702305a023766ea84fbdc36e32dbbc3
-
SHA1
796643a22b7c19b6296993d36a45ebbdb5b7c8d4
-
SHA256
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a
-
SHA512
29ca0e8b9ffe133e6e1d8cda4ffe38df0eae82114719afe09e4cd1be2232d1e24251dadba41e064abdc45b30f10191f585e49b166ebe4f390ec0c798b9d806d6
-
SSDEEP
6144:2x+LsYnmEe98RKePE0MefNUBDxQykyZJzOKuSU+rS4gWE9:2x+oSdHRKUMeNkfZ4EUpWE
Static task
static1
Behavioral task
behavioral1
Sample
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
gena
193.233.20.30:4125
-
auth_value
93c20961cb6b06b2d5781c212db6201e
Targets
-
-
Target
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a.exe
-
Size
420KB
-
MD5
4702305a023766ea84fbdc36e32dbbc3
-
SHA1
796643a22b7c19b6296993d36a45ebbdb5b7c8d4
-
SHA256
49b8fcaed3a4b09565a922ae280266dd8565425bebec5540ad5972d031a8214a
-
SHA512
29ca0e8b9ffe133e6e1d8cda4ffe38df0eae82114719afe09e4cd1be2232d1e24251dadba41e064abdc45b30f10191f585e49b166ebe4f390ec0c798b9d806d6
-
SSDEEP
6144:2x+LsYnmEe98RKePE0MefNUBDxQykyZJzOKuSU+rS4gWE9:2x+oSdHRKUMeNkfZ4EUpWE
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-