General
-
Target
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe
-
Size
434KB
-
Sample
241120-1wltbavelm
-
MD5
fc022ecf59aa3c02155f8c74b4caf9de
-
SHA1
013c95d309f07197e468877d2f92cf603c454769
-
SHA256
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6
-
SHA512
7d872f87bebe6da5f806ba07690b70011a7d13c70ef10331c9da6d9d3847b9289411fe3500c53905cd24a0580583e9abb76b1ab0ccc3adaa3e73f396bfae7421
-
SSDEEP
6144:nZlPv35dIB1lrjcf5KYaa/jIimvOpxemxbMtW4:Zl335dIB1hof5KXa/tm62W4
Static task
static1
Behavioral task
behavioral1
Sample
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe
-
Size
434KB
-
MD5
fc022ecf59aa3c02155f8c74b4caf9de
-
SHA1
013c95d309f07197e468877d2f92cf603c454769
-
SHA256
4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6
-
SHA512
7d872f87bebe6da5f806ba07690b70011a7d13c70ef10331c9da6d9d3847b9289411fe3500c53905cd24a0580583e9abb76b1ab0ccc3adaa3e73f396bfae7421
-
SSDEEP
6144:nZlPv35dIB1lrjcf5KYaa/jIimvOpxemxbMtW4:Zl335dIB1hof5KXa/tm62W4
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-