General
-
Target
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605.exe
-
Size
175KB
-
Sample
241119-lzd6batema
-
MD5
dcae4c582d3c70f25948049ffc6f987d
-
SHA1
c1da04ae0d41d70ea3b9a82488cf9a6a784b07f8
-
SHA256
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605
-
SHA512
3c932e4dc859c10a51f55741a08a44db8a57ed3907ff486f064907d10516f8c678d98e9527602eef542ffc637c1b0556aefed248c7e1b0bda116ab1b75bbc42d
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOd:oqZVTPfBbXhG
Behavioral task
behavioral1
Sample
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dunkan
193.233.20.24:4123
-
auth_value
505c396c57c6287fc3fdc5f3aeab0819
Targets
-
-
Target
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605.exe
-
Size
175KB
-
MD5
dcae4c582d3c70f25948049ffc6f987d
-
SHA1
c1da04ae0d41d70ea3b9a82488cf9a6a784b07f8
-
SHA256
4319a0bd5ba33d938b21a45babce29369510fc37b67a3e995cb1dd8fff869605
-
SHA512
3c932e4dc859c10a51f55741a08a44db8a57ed3907ff486f064907d10516f8c678d98e9527602eef542ffc637c1b0556aefed248c7e1b0bda116ab1b75bbc42d
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOd:oqZVTPfBbXhG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-