General
-
Target
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a
-
Size
391KB
-
Sample
241115-eavnfaxqd1
-
MD5
56396c3f090f5506f991ad64677edf91
-
SHA1
1e9e86a9aa52c7b1889e48400127b95715b65ef5
-
SHA256
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a
-
SHA512
e9a8ad9719baa0db479010d36e1e394aada8755144e24df69f62aa88f90e77d97f2f5ed161d3a699e0c626d6cef765031dc085987718cc452941b8178aec3119
-
SSDEEP
6144:/pOeL+kqcgnfTjGp/clSVaQo9+5Dixhm3/D5KE7hUH:ROe6kt2fTCtVw+tixhmlh7hA
Static task
static1
Behavioral task
behavioral1
Sample
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
gena
193.233.20.30:4125
-
auth_value
93c20961cb6b06b2d5781c212db6201e
Targets
-
-
Target
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a
-
Size
391KB
-
MD5
56396c3f090f5506f991ad64677edf91
-
SHA1
1e9e86a9aa52c7b1889e48400127b95715b65ef5
-
SHA256
f58195c4ee2ad2322f3bfc78f390d1850440e1e2bcc101abbeb1c54c3493d34a
-
SHA512
e9a8ad9719baa0db479010d36e1e394aada8755144e24df69f62aa88f90e77d97f2f5ed161d3a699e0c626d6cef765031dc085987718cc452941b8178aec3119
-
SSDEEP
6144:/pOeL+kqcgnfTjGp/clSVaQo9+5Dixhm3/D5KE7hUH:ROe6kt2fTCtVw+tixhmlh7hA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-