General
-
Target
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe
-
Size
296KB
-
Sample
241116-xw4gkssbqr
-
MD5
f9607e6621ff1582c96448ff7644afbb
-
SHA1
2a98e3af24380e1fb81e3b49cb0bd85fd8be666a
-
SHA256
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5
-
SHA512
eb2cb94e5f8db52d6897178d2f60202ef655adba795597d5e795a24f8c996438adc6b2e29e4f6701e6fcf4036b1e42078193cbc2a2967e5752bb3fe352683c66
-
SSDEEP
6144:HqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O/:Hqa5/ZU9EvlyA2aWvR
Static task
static1
Behavioral task
behavioral1
Sample
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe
-
Size
296KB
-
MD5
f9607e6621ff1582c96448ff7644afbb
-
SHA1
2a98e3af24380e1fb81e3b49cb0bd85fd8be666a
-
SHA256
d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5
-
SHA512
eb2cb94e5f8db52d6897178d2f60202ef655adba795597d5e795a24f8c996438adc6b2e29e4f6701e6fcf4036b1e42078193cbc2a2967e5752bb3fe352683c66
-
SSDEEP
6144:HqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O/:Hqa5/ZU9EvlyA2aWvR
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-