General
-
Target
715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1N
-
Size
843KB
-
Sample
241113-p3nqpsscke
-
MD5
d9e9faa87d2b4d2f82b2f9842306b5d0
-
SHA1
b4d495e739080745ef74ca474b8c722f4f5ae82c
-
SHA256
715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1
-
SHA512
cba05534a4ccbbb7be1428c785d55bf94726a50977e85963effcd3b831cdee2cb2b2702993c7e74dcce5e96811a9855d0bb4d559e5df65c877909711b379e75a
-
SSDEEP
24576:By2n1TWWleo1ikd2e2ya24Xo4M9pmsNUF:0UC+eox2e2qfN
Static task
static1
Behavioral task
behavioral1
Sample
715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1N
-
Size
843KB
-
MD5
d9e9faa87d2b4d2f82b2f9842306b5d0
-
SHA1
b4d495e739080745ef74ca474b8c722f4f5ae82c
-
SHA256
715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1
-
SHA512
cba05534a4ccbbb7be1428c785d55bf94726a50977e85963effcd3b831cdee2cb2b2702993c7e74dcce5e96811a9855d0bb4d559e5df65c877909711b379e75a
-
SSDEEP
24576:By2n1TWWleo1ikd2e2ya24Xo4M9pmsNUF:0UC+eox2e2qfN
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-