General
-
Target
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe
-
Size
168KB
-
Sample
241206-bxj9faypbk
-
MD5
0d735e67ae6c9ec089bb6ea71e8f8480
-
SHA1
798e74b1629946828c8fef847539bf7a5d0a84b1
-
SHA256
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9
-
SHA512
50942aeee7e54be2392cbe8692d8f5402d5e23a5400fc7827ed7deca77a26ce5b7041231ccf0ba4acaf1f02c5c3b206270086f422e0a1c991100edcd9e5b8f9f
-
SSDEEP
1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR
Behavioral task
behavioral1
Sample
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dippo
217.196.96.102:4132
-
auth_value
79490ff628fd6af3b29170c3c163874b
Targets
-
-
Target
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9N.exe
-
Size
168KB
-
MD5
0d735e67ae6c9ec089bb6ea71e8f8480
-
SHA1
798e74b1629946828c8fef847539bf7a5d0a84b1
-
SHA256
5f1b8ac2a191feebc53d932c90cac62d939ee63768ec6e44abff53a313db84e9
-
SHA512
50942aeee7e54be2392cbe8692d8f5402d5e23a5400fc7827ed7deca77a26ce5b7041231ccf0ba4acaf1f02c5c3b206270086f422e0a1c991100edcd9e5b8f9f
-
SSDEEP
1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-