General
-
Target
ac3201ef44b170f3ffba66e04e52285d8d0bbaf3b80155273ba1634085074e84.exe
-
Size
843KB
-
Sample
241115-2d749stfpn
-
MD5
56ab9abd5c5ae4d01f6cf0d69d47b474
-
SHA1
fcd21254e6eff8b76450ce220c876b408e826147
-
SHA256
ac3201ef44b170f3ffba66e04e52285d8d0bbaf3b80155273ba1634085074e84
-
SHA512
ed4b26f01db9cfb60ea6990a4a3d68109cd08adff002ee5ca21396d58f029cd5ec6f8a66a58df761d29085e0a5633fbfb44df45e4291883e0c5d4177b5840833
-
SSDEEP
24576:vyk9xMuH4eLpt5swv1DfQJggJET6d5fTzwMthF:6axMuYeLPNDMgGvb8MtX
Static task
static1
Behavioral task
behavioral1
Sample
ac3201ef44b170f3ffba66e04e52285d8d0bbaf3b80155273ba1634085074e84.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
ac3201ef44b170f3ffba66e04e52285d8d0bbaf3b80155273ba1634085074e84.exe
-
Size
843KB
-
MD5
56ab9abd5c5ae4d01f6cf0d69d47b474
-
SHA1
fcd21254e6eff8b76450ce220c876b408e826147
-
SHA256
ac3201ef44b170f3ffba66e04e52285d8d0bbaf3b80155273ba1634085074e84
-
SHA512
ed4b26f01db9cfb60ea6990a4a3d68109cd08adff002ee5ca21396d58f029cd5ec6f8a66a58df761d29085e0a5633fbfb44df45e4291883e0c5d4177b5840833
-
SSDEEP
24576:vyk9xMuH4eLpt5swv1DfQJggJET6d5fTzwMthF:6axMuYeLPNDMgGvb8MtX
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-