General
-
Target
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe
-
Size
408KB
-
Sample
241116-ldws8sspgw
-
MD5
2ab35d804cd275e7091d1b3da8822cc8
-
SHA1
819e93d7a4f73e7ed34e9e2e3edb906620c82200
-
SHA256
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5
-
SHA512
3a13d10d93be06d0ad0be1606c1c6de2956e8526eeccdb87ffd09b615c13664a6a4080b85c776d5dcf0c4ce0a855d4825b0170e642b5e095e416a1ccced5c57c
-
SSDEEP
6144:WxbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:W15kv8V5r/hfcexgreY
Static task
static1
Behavioral task
behavioral1
Sample
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe
-
Size
408KB
-
MD5
2ab35d804cd275e7091d1b3da8822cc8
-
SHA1
819e93d7a4f73e7ed34e9e2e3edb906620c82200
-
SHA256
84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5
-
SHA512
3a13d10d93be06d0ad0be1606c1c6de2956e8526eeccdb87ffd09b615c13664a6a4080b85c776d5dcf0c4ce0a855d4825b0170e642b5e095e416a1ccced5c57c
-
SSDEEP
6144:WxbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:W15kv8V5r/hfcexgreY
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-