General
-
Target
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d.exe
-
Size
859KB
-
Sample
241122-w3ldxawjhw
-
MD5
4ce03c4d64798295436854f66bd6b65c
-
SHA1
9b361cb195f5debf9f9fcbe42137cb33f93b0081
-
SHA256
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d
-
SHA512
3f11a0250575066146bcba237ae575f6dee9fbc34d05acefddb477d2bbb28664bc82fe66ce1ae3632e450bc524eb307b2286e792b2da8c6d1695f4cf1787398f
-
SSDEEP
12288:YOdplud53QIolhA9s0SjEOm17avNGpWasRDuhyOLQXpC3WFlMZPvyRlgNr8+WGuq:7/g3Q1lhACERAGpWGpU5SXyRSNXD3iv8
Static task
static1
Behavioral task
behavioral1
Sample
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@tupa187
95.181.152.6:46927
-
auth_value
cdf3919a262c0d6ba99116b375d7551c
Targets
-
-
Target
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d.exe
-
Size
859KB
-
MD5
4ce03c4d64798295436854f66bd6b65c
-
SHA1
9b361cb195f5debf9f9fcbe42137cb33f93b0081
-
SHA256
4aad97cc0c95e6fa14e2edc38efea25a0cd0bf703664d6cee8dc56ae72b4c06d
-
SHA512
3f11a0250575066146bcba237ae575f6dee9fbc34d05acefddb477d2bbb28664bc82fe66ce1ae3632e450bc524eb307b2286e792b2da8c6d1695f4cf1787398f
-
SSDEEP
12288:YOdplud53QIolhA9s0SjEOm17avNGpWasRDuhyOLQXpC3WFlMZPvyRlgNr8+WGuq:7/g3Q1lhACERAGpWGpU5SXyRSNXD3iv8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-