General
-
Target
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491.exe
-
Size
168KB
-
Sample
241206-h59ydswmdw
-
MD5
dca2cb1c419cdc1c2219af59cd864376
-
SHA1
9380ccff26f8df04e18631ade6629c7dd88167c5
-
SHA256
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491
-
SHA512
950c51624532e6eccf4c1edabe2ed834c93847c5c152c75757c203dfc652e2d0c3beae747aee0586540f8a2c5a73c315379c9a8afe8ce96a68bea91a47fbcce2
-
SSDEEP
1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR5:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR5
Behavioral task
behavioral1
Sample
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dippo
217.196.96.102:4132
-
auth_value
79490ff628fd6af3b29170c3c163874b
Targets
-
-
Target
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491.exe
-
Size
168KB
-
MD5
dca2cb1c419cdc1c2219af59cd864376
-
SHA1
9380ccff26f8df04e18631ade6629c7dd88167c5
-
SHA256
eeb558f1c4a75ac1552bd0014368c7c3ca0878eb6edbbbb825782462da852491
-
SHA512
950c51624532e6eccf4c1edabe2ed834c93847c5c152c75757c203dfc652e2d0c3beae747aee0586540f8a2c5a73c315379c9a8afe8ce96a68bea91a47fbcce2
-
SSDEEP
1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR5:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR5
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-