General
-
Target
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe
-
Size
290KB
-
Sample
241114-gxbvysynfk
-
MD5
a9848a099b992d918c86bdb6d95860c0
-
SHA1
34a099d48a989c5b9942df59329f05d88a9ac7b3
-
SHA256
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384c
-
SHA512
f97ab5a6ee3f112ee342c50b1b5050fe2bb3c9017b8d089a751abb4fd543e8753f9505d777bc3b4a60e4b3e4a75ce2e44f50707d967b66860696e5185d83e3ab
-
SSDEEP
3072:BYSHhVp7DvonAa4NJA/b61pAHUWlRZvOzPGRajGhrunf3Wp0nnCkdK8hETNBp1D0:jhfZa4NJoNfW6QjGsnf3XCwZExBp1Dh
Static task
static1
Behavioral task
behavioral1
Sample
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
gena
193.233.20.30:4125
-
auth_value
93c20961cb6b06b2d5781c212db6201e
Targets
-
-
Target
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384cN.exe
-
Size
290KB
-
MD5
a9848a099b992d918c86bdb6d95860c0
-
SHA1
34a099d48a989c5b9942df59329f05d88a9ac7b3
-
SHA256
e28d7834a7642626e22d7bb5ac758883ace5fe406cba836da6442009b78a384c
-
SHA512
f97ab5a6ee3f112ee342c50b1b5050fe2bb3c9017b8d089a751abb4fd543e8753f9505d777bc3b4a60e4b3e4a75ce2e44f50707d967b66860696e5185d83e3ab
-
SSDEEP
3072:BYSHhVp7DvonAa4NJA/b61pAHUWlRZvOzPGRajGhrunf3Wp0nnCkdK8hETNBp1D0:jhfZa4NJoNfW6QjGsnf3XCwZExBp1Dh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-