General
-
Target
574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578afN.exe
-
Size
1015KB
-
Sample
241113-v14a9swfql
-
MD5
cd790e2d6b1254c880b774b57655fb50
-
SHA1
ab136b01537b00e22f4ecbe8e57f42470bc2f08d
-
SHA256
574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578af
-
SHA512
36541d4b9358ac725bd3f563b8726749681f30b7dde72ebae8b19062cff109a27fcd6f9b89c3c0ee970dea2b570acadab308859c6923a1b21beb99b1688d7cdb
-
SSDEEP
24576:ryTvvk1OfUhB9ifJdtnUqTC0vNjAJW4m:eTnk1+Uh7gTpTC8AF
Static task
static1
Behavioral task
behavioral1
Sample
574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578afN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578afN.exe
-
Size
1015KB
-
MD5
cd790e2d6b1254c880b774b57655fb50
-
SHA1
ab136b01537b00e22f4ecbe8e57f42470bc2f08d
-
SHA256
574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578af
-
SHA512
36541d4b9358ac725bd3f563b8726749681f30b7dde72ebae8b19062cff109a27fcd6f9b89c3c0ee970dea2b570acadab308859c6923a1b21beb99b1688d7cdb
-
SSDEEP
24576:ryTvvk1OfUhB9ifJdtnUqTC0vNjAJW4m:eTnk1+Uh7gTpTC8AF
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-