General
-
Target
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a.exe
-
Size
518KB
-
Sample
241123-cdxabs1lhj
-
MD5
539529a70825de69b93851490c61fc0f
-
SHA1
6d29da17d8f439969f6b7b83eb94688a892fcf7f
-
SHA256
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a
-
SHA512
3a1bb8c2bc9cca4f3f14cf6021bff0ae146bdbdd4b3fd6c63ce8692712abc3976318ed822590904f6a3af09d39b1ea99f84b07d887a03751bae1a861fec1290a
-
SSDEEP
3072:lf3w8rV+GDbcCISidiZZZ4RSppGeJQSRHk6zTbi2kwIxJAx0niF:h3j5A7Sp3RHk6ZTuAxSQ
Static task
static1
Behavioral task
behavioral1
Sample
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a.exe
-
Size
518KB
-
MD5
539529a70825de69b93851490c61fc0f
-
SHA1
6d29da17d8f439969f6b7b83eb94688a892fcf7f
-
SHA256
475938eb89c20477b6dcbe15a0401949ba95afa238760bf06b5e3534523e5d3a
-
SHA512
3a1bb8c2bc9cca4f3f14cf6021bff0ae146bdbdd4b3fd6c63ce8692712abc3976318ed822590904f6a3af09d39b1ea99f84b07d887a03751bae1a861fec1290a
-
SSDEEP
3072:lf3w8rV+GDbcCISidiZZZ4RSppGeJQSRHk6zTbi2kwIxJAx0niF:h3j5A7Sp3RHk6ZTuAxSQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-