General
-
Target
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe
-
Size
352KB
-
Sample
241119-qg4epswmcs
-
MD5
77122c30abf2c4be2fe62829c73d5fa0
-
SHA1
011cdf731e44259cb71d742eed95d8823a754116
-
SHA256
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2
-
SHA512
8d3b8d2cf1f72fb1b9ca05c5c5b9ad1ecef76923d0cead2fbc85d59b98c164db39c60852c918a728d8c8bafc02c0f4d0db216eb47f38194f655a8b1ad7c641b1
-
SSDEEP
6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:0BZoJ3rU6RH/wjjGt
Static task
static1
Behavioral task
behavioral1
Sample
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe
-
Size
352KB
-
MD5
77122c30abf2c4be2fe62829c73d5fa0
-
SHA1
011cdf731e44259cb71d742eed95d8823a754116
-
SHA256
de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2
-
SHA512
8d3b8d2cf1f72fb1b9ca05c5c5b9ad1ecef76923d0cead2fbc85d59b98c164db39c60852c918a728d8c8bafc02c0f4d0db216eb47f38194f655a8b1ad7c641b1
-
SSDEEP
6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:0BZoJ3rU6RH/wjjGt
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-