General
-
Target
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b
-
Size
175KB
-
Sample
241115-eenqpaskhn
-
MD5
096476980714c11dcf53176dadab1db3
-
SHA1
4ac1ac946b441c82dec0f71ceb8c5b28f91c707a
-
SHA256
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b
-
SHA512
f5d88d06c4e580d1433da8d023f9a7f9c1e1f588822c8195b4300af986ff398400ffeb71a1d005dabb1157e88d6661a01cf0130b4806835155e3f77ce1b3f59a
-
SSDEEP
3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih
Behavioral task
behavioral1
Sample
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
from
176.113.115.145:4125
-
auth_value
8633e283485822a4a48f0a41d5397566
Targets
-
-
Target
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b
-
Size
175KB
-
MD5
096476980714c11dcf53176dadab1db3
-
SHA1
4ac1ac946b441c82dec0f71ceb8c5b28f91c707a
-
SHA256
f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b
-
SHA512
f5d88d06c4e580d1433da8d023f9a7f9c1e1f588822c8195b4300af986ff398400ffeb71a1d005dabb1157e88d6661a01cf0130b4806835155e3f77ce1b3f59a
-
SSDEEP
3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-