General
-
Target
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7.exe
-
Size
168KB
-
Sample
241119-r2f1ksxjdv
-
MD5
8234b4ee8abfb5991efc190fc9b935d9
-
SHA1
ac55f04973df5fa8fce97a596f72ed88baf86fdd
-
SHA256
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7
-
SHA512
599da20331914e7797784580cfc9ec12cccebb9047f625e27de0bd14943d223696b873b0d5b944918ad3c94b541dd6d04265d6008056d78df40240cd2f627874
-
SSDEEP
3072:TKGk00DcQO1y56qVemIWrnDCv2y8e8hZE:WGk0qcdy56chnDCv2yZ
Behavioral task
behavioral1
Sample
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dona
217.196.96.101:4132
-
auth_value
9fbb198992bbc83a84ab1f21384813e3
Targets
-
-
Target
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7.exe
-
Size
168KB
-
MD5
8234b4ee8abfb5991efc190fc9b935d9
-
SHA1
ac55f04973df5fa8fce97a596f72ed88baf86fdd
-
SHA256
1148068fc56d0a612b502490b0c0f3999cda62b183d3269d8078fa97a57f32c7
-
SHA512
599da20331914e7797784580cfc9ec12cccebb9047f625e27de0bd14943d223696b873b0d5b944918ad3c94b541dd6d04265d6008056d78df40240cd2f627874
-
SSDEEP
3072:TKGk00DcQO1y56qVemIWrnDCv2y8e8hZE:WGk0qcdy56chnDCv2yZ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-