General
-
Target
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe
-
Size
175KB
-
Sample
241115-xkdrsaynft
-
MD5
d34d2158f6f82531bbc24b3305c230b0
-
SHA1
a2c0071d0ce9865fa2a0d7ce26d3665ce7b13a99
-
SHA256
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0
-
SHA512
7a5617bf1e7886f961b9e69f8193c2235cb64c6d7541b5803e1555c9c853c833377938d3e6f964d9302d03374a5827910a213308f6897db522dd6c42708ad707
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh
Behavioral task
behavioral1
Sample
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dunkan
193.233.20.24:4123
-
auth_value
505c396c57c6287fc3fdc5f3aeab0819
Targets
-
-
Target
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe
-
Size
175KB
-
MD5
d34d2158f6f82531bbc24b3305c230b0
-
SHA1
a2c0071d0ce9865fa2a0d7ce26d3665ce7b13a99
-
SHA256
0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0
-
SHA512
7a5617bf1e7886f961b9e69f8193c2235cb64c6d7541b5803e1555c9c853c833377938d3e6f964d9302d03374a5827910a213308f6897db522dd6c42708ad707
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-