General
-
Target
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe
-
Size
175KB
-
Sample
241119-gmtb9asajl
-
MD5
44dc5523059dc6b53d8d9e249002acc0
-
SHA1
9d2c1a81f9a9fbc6ad21f9c78949b072ceecb1dd
-
SHA256
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0
-
SHA512
6ac85f176affea68cbb92815c7a924971ad4efd8adda7c0e6b9a4a43e06fe844ee487300d58afa2568f3f31a30c5038bd3034c36f1cdb0a81eec40a5fb250ecb
-
SSDEEP
3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh
Behavioral task
behavioral1
Sample
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fabio
193.233.20.27:4123
-
auth_value
56b82736c3f56b13be8e64c87d2cf9e5
Targets
-
-
Target
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0N.exe
-
Size
175KB
-
MD5
44dc5523059dc6b53d8d9e249002acc0
-
SHA1
9d2c1a81f9a9fbc6ad21f9c78949b072ceecb1dd
-
SHA256
1f5964448003dd2af658df3e9138a9edb12ecd4a30b348096369e83c68e9a3d0
-
SHA512
6ac85f176affea68cbb92815c7a924971ad4efd8adda7c0e6b9a4a43e06fe844ee487300d58afa2568f3f31a30c5038bd3034c36f1cdb0a81eec40a5fb250ecb
-
SSDEEP
3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-