General
-
Target
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1N.exe
-
Size
292KB
-
Sample
241119-knnpyasnfx
-
MD5
2bae4d978c71ff8a8fe688d769586250
-
SHA1
869998136685214d78ba2810f611c1c945618960
-
SHA256
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1
-
SHA512
df400db45adbd3cb313b4c9e3b4b1eacdb18b451ec3a69af8c4dd517b3fc5594db59c1e390f6eeb5d80aed3684679b2773ffd84da3c7255acdd1bf09b4003c6a
-
SSDEEP
6144:g28LHp69tiHZ3cLRtzD+OnCautCNqxSdGv9:iDp6iHZ3ctxD+OzCCQb
Static task
static1
Behavioral task
behavioral1
Sample
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1N.exe
-
Size
292KB
-
MD5
2bae4d978c71ff8a8fe688d769586250
-
SHA1
869998136685214d78ba2810f611c1c945618960
-
SHA256
4e96e6461fe169a98af2ffd8171fd77365ce633b7983fb6359b010a76376bdc1
-
SHA512
df400db45adbd3cb313b4c9e3b4b1eacdb18b451ec3a69af8c4dd517b3fc5594db59c1e390f6eeb5d80aed3684679b2773ffd84da3c7255acdd1bf09b4003c6a
-
SSDEEP
6144:g28LHp69tiHZ3cLRtzD+OnCautCNqxSdGv9:iDp6iHZ3ctxD+OzCCQb
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-