General
-
Target
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe
-
Size
482KB
-
Sample
250104-k2w88svlgm
-
MD5
010d03f3e41336bbd2c29a08f43592a0
-
SHA1
068cbc987244b362465f70638381b2640188ca04
-
SHA256
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511
-
SHA512
5467c67469d3b8a23452e3427ce43340f2ddf04fde065aa9ac36f49c0fd0293fcd0033bf493787034df36847c77872a0d5313c1d87861f1c3bdfac3dc159be43
-
SSDEEP
6144:wD5nGxijz9VhVPjwxkI8ZQsRRRC6nQOzCa0K05JgPvtLkhSCmQLKeMk/0hk1S:A8ijRbVPExUQsX3noaSJgPFYcQKnKM
Static task
static1
Behavioral task
behavioral1
Sample
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
20201212
80.87.192.249:16640
-
auth_value
00938fbc99410eb2e8dca000ec5f89db
Targets
-
-
Target
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511N.exe
-
Size
482KB
-
MD5
010d03f3e41336bbd2c29a08f43592a0
-
SHA1
068cbc987244b362465f70638381b2640188ca04
-
SHA256
0b4ddd70b474b1f317ab498592a61a01b6c5e25d301bea0e5e67c12424eb3511
-
SHA512
5467c67469d3b8a23452e3427ce43340f2ddf04fde065aa9ac36f49c0fd0293fcd0033bf493787034df36847c77872a0d5313c1d87861f1c3bdfac3dc159be43
-
SSDEEP
6144:wD5nGxijz9VhVPjwxkI8ZQsRRRC6nQOzCa0K05JgPvtLkhSCmQLKeMk/0hk1S:A8ijRbVPExUQsX3noaSJgPFYcQKnKM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-