General
-
Target
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192.exe
-
Size
356KB
-
Sample
250124-ehxg1azlcj
-
MD5
81c9b42b9a46e50981d3f078688ade0c
-
SHA1
fa0bb118655fa260855b18f73b49358b389b7bcd
-
SHA256
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192
-
SHA512
e26e3fab4bb855f0c4a838c32b49e4c1530e6bc3eddc9163c9f1f0c3e1c9ddacfadc40ae21108a3938b642d9c7c82905be83badee0c58eec5e1f2934587b950c
-
SSDEEP
6144:3ShHvmmMtHKD/FyOPcg/F/5MlGzbgsfcMVu4nKGfmQbmxO:ihPJMtHK7Fh0Gbgxx4n9f
Static task
static1
Behavioral task
behavioral1
Sample
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@Germany
194.26.135.162:2920
-
auth_value
9d15d78194367a949e54a07d6ce02c62
Targets
-
-
Target
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192.exe
-
Size
356KB
-
MD5
81c9b42b9a46e50981d3f078688ade0c
-
SHA1
fa0bb118655fa260855b18f73b49358b389b7bcd
-
SHA256
01b9ae05c0c5d50490c05aa2e2873b77a71792adf7c9fb0a1205780a70547192
-
SHA512
e26e3fab4bb855f0c4a838c32b49e4c1530e6bc3eddc9163c9f1f0c3e1c9ddacfadc40ae21108a3938b642d9c7c82905be83badee0c58eec5e1f2934587b950c
-
SSDEEP
6144:3ShHvmmMtHKD/FyOPcg/F/5MlGzbgsfcMVu4nKGfmQbmxO:ihPJMtHK7Fh0Gbgxx4n9f
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-