General
-
Target
7a291934fd0301fc706b13d11692b000669438bc97fb4acfbe494fa8c86c6710.exe
-
Size
1016KB
-
Sample
241115-wq97haxrfs
-
MD5
d35d868933432c72faa8950e2f52f54e
-
SHA1
8abea64c4a6eddbda0740f8a0ba03d9e45b31650
-
SHA256
7a291934fd0301fc706b13d11692b000669438bc97fb4acfbe494fa8c86c6710
-
SHA512
b8bcfb914fafd6ac13513584ec56d382aae76568fab79ebbc84ecf61f8ae41efa3e29231048f145ec688bb14334c0e2ac0523833b6d6bd797d0ad1f0dbc659bc
-
SSDEEP
24576:tyf8JX4MOkBQMMZiQIH3YItK2v7DztqhM0dY:I+XlBQMMZl+dhv/BCM/
Static task
static1
Behavioral task
behavioral1
Sample
7a291934fd0301fc706b13d11692b000669438bc97fb4acfbe494fa8c86c6710.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
7a291934fd0301fc706b13d11692b000669438bc97fb4acfbe494fa8c86c6710.exe
-
Size
1016KB
-
MD5
d35d868933432c72faa8950e2f52f54e
-
SHA1
8abea64c4a6eddbda0740f8a0ba03d9e45b31650
-
SHA256
7a291934fd0301fc706b13d11692b000669438bc97fb4acfbe494fa8c86c6710
-
SHA512
b8bcfb914fafd6ac13513584ec56d382aae76568fab79ebbc84ecf61f8ae41efa3e29231048f145ec688bb14334c0e2ac0523833b6d6bd797d0ad1f0dbc659bc
-
SSDEEP
24576:tyf8JX4MOkBQMMZiQIH3YItK2v7DztqhM0dY:I+XlBQMMZl+dhv/BCM/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-