General
-
Target
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe
-
Size
384KB
-
Sample
241119-wmvmmsyqc1
-
MD5
1854755adc1845a69cf0717877cbc860
-
SHA1
5d881498a0fff1845cc9c18278f47cdd2c15a43b
-
SHA256
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066
-
SHA512
504530e52638c1984a02e7b2ccc8422c3bac6e8429f929918681504d8622d9a3e77a8a6a14ee76b352a8178b34b43e3c6a7c261bf3dc6bdb5a584f9b6e6f49eb
-
SSDEEP
6144:jhggEUu25E2ekhl3yMKPHYNj6OxhukRcFEz2cLON/HNN4T:jhggLu2TXyMKQ96OuSMN
Static task
static1
Behavioral task
behavioral1
Sample
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
boris
193.233.20.32:4125
-
auth_value
766b5bdf6dbefcf7ca223351952fc38f
Targets
-
-
Target
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe
-
Size
384KB
-
MD5
1854755adc1845a69cf0717877cbc860
-
SHA1
5d881498a0fff1845cc9c18278f47cdd2c15a43b
-
SHA256
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066
-
SHA512
504530e52638c1984a02e7b2ccc8422c3bac6e8429f929918681504d8622d9a3e77a8a6a14ee76b352a8178b34b43e3c6a7c261bf3dc6bdb5a584f9b6e6f49eb
-
SSDEEP
6144:jhggEUu25E2ekhl3yMKPHYNj6OxhukRcFEz2cLON/HNN4T:jhggLu2TXyMKQ96OuSMN
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-