General
-
Target
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe
-
Size
408KB
-
Sample
241115-ry17cawalg
-
MD5
245e483f4a790aaacce22cf5ccd4f37e
-
SHA1
51a539c1a5e5cf0d9f101d1b022757eb98805911
-
SHA256
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b
-
SHA512
39ae4632f2b4fd5a6daa2c5a0b7dcc83180d8b24cbd857a60fb86ae2b18e596e848721832f77a3484ccdf2caf8cee2e104c0917423b12c21186039eb5cb15d0e
-
SSDEEP
6144:5cRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJT:56SOmTn9obe17WSUjC0+0DzVV
Static task
static1
Behavioral task
behavioral1
Sample
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe
-
Size
408KB
-
MD5
245e483f4a790aaacce22cf5ccd4f37e
-
SHA1
51a539c1a5e5cf0d9f101d1b022757eb98805911
-
SHA256
647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b
-
SHA512
39ae4632f2b4fd5a6daa2c5a0b7dcc83180d8b24cbd857a60fb86ae2b18e596e848721832f77a3484ccdf2caf8cee2e104c0917423b12c21186039eb5cb15d0e
-
SSDEEP
6144:5cRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJT:56SOmTn9obe17WSUjC0+0DzVV
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-