General
-
Target
e61d7763641ac406c2cdf5cb8e83c93be57b697465000f00315ac1b20763639e.exe
-
Size
1014KB
-
Sample
241115-vjqc3syarl
-
MD5
e3480bf00fdc821a5d3fb4c665e074d6
-
SHA1
35b2a472a1336594b6ff2aeb97e7239e15eb1b2b
-
SHA256
e61d7763641ac406c2cdf5cb8e83c93be57b697465000f00315ac1b20763639e
-
SHA512
7430847f8c4924fa1c78440de1e0d2341ac9d8db0a7fb1dea44b5136b6a422cf7ce9e22adc89558b06ab7e9b210e23b0292e168a6bae1d776ae3b38d43815867
-
SSDEEP
12288:Oy903hVGVmfXjz9M9qYkWbXcv75NAFR7G+DEWjQBsoHYIqfDHCZgJTseiH4lxiC:OyQhVN7csD5+FZFEWMmoHYIqLHC2JNOC
Static task
static1
Behavioral task
behavioral1
Sample
e61d7763641ac406c2cdf5cb8e83c93be57b697465000f00315ac1b20763639e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
e61d7763641ac406c2cdf5cb8e83c93be57b697465000f00315ac1b20763639e.exe
-
Size
1014KB
-
MD5
e3480bf00fdc821a5d3fb4c665e074d6
-
SHA1
35b2a472a1336594b6ff2aeb97e7239e15eb1b2b
-
SHA256
e61d7763641ac406c2cdf5cb8e83c93be57b697465000f00315ac1b20763639e
-
SHA512
7430847f8c4924fa1c78440de1e0d2341ac9d8db0a7fb1dea44b5136b6a422cf7ce9e22adc89558b06ab7e9b210e23b0292e168a6bae1d776ae3b38d43815867
-
SSDEEP
12288:Oy903hVGVmfXjz9M9qYkWbXcv75NAFR7G+DEWjQBsoHYIqfDHCZgJTseiH4lxiC:OyQhVN7csD5+FZFEWMmoHYIqLHC2JNOC
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-