General
-
Target
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177.exe
-
Size
175KB
-
Sample
241119-p46mxawkgy
-
MD5
9e7b549904454831cb6afb12bc7af5f7
-
SHA1
c2fd91eb8a54935bad49e544b4a39c7479df003d
-
SHA256
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177
-
SHA512
fc659d442365295b5d0f12674f7250ac231f1a5ba64f48c04aa9fb8ce811b541c2b2cfd267b97c50c29fda9f54d943a93a98f06a9175fb40935652bddae76b92
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOF:oqZVTPfBbXhG
Behavioral task
behavioral1
Sample
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dunkan
193.233.20.24:4123
-
auth_value
505c396c57c6287fc3fdc5f3aeab0819
Targets
-
-
Target
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177.exe
-
Size
175KB
-
MD5
9e7b549904454831cb6afb12bc7af5f7
-
SHA1
c2fd91eb8a54935bad49e544b4a39c7479df003d
-
SHA256
fba5824a7c708acf5edd57c8f6265534ad461c425b9a85238584721abb819177
-
SHA512
fc659d442365295b5d0f12674f7250ac231f1a5ba64f48c04aa9fb8ce811b541c2b2cfd267b97c50c29fda9f54d943a93a98f06a9175fb40935652bddae76b92
-
SSDEEP
3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOF:oqZVTPfBbXhG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-