Overview
overview
3Static
static
1Win32.Redl...r.a.7z
windows10-2004-x64
1Win32.Redl...r.a.7z
windows11-ltsc_2024-x64
1Win32.Redl...ery.cs
windows10-2004-x64
3Win32.Redl...ery.cs
windows11-ltsc_2024-x64
3Win32.Redl...ard.cs
windows10-2004-x64
3Win32.Redl...ard.cs
windows11-ltsc_2024-x64
3Win32.Redl...ery.cs
windows10-2004-x64
3Win32.Redl...ery.cs
windows11-ltsc_2024-x64
3Win32.Redl...ter.cs
windows10-2004-x64
3Win32.Redl...ter.cs
windows11-ltsc_2024-x64
3Win32.Redl...ery.cs
windows10-2004-x64
3Win32.Redl...ery.cs
windows11-ltsc_2024-x64
3Win32.Redl...ype.cs
windows10-2004-x64
3Win32.Redl...ype.cs
windows11-ltsc_2024-x64
3Win32.Redl...ess.cs
windows10-2004-x64
3Win32.Redl...ess.cs
windows11-ltsc_2024-x64
3Win32.Redl...ery.cs
windows10-2004-x64
3Win32.Redl...ery.cs
windows11-ltsc_2024-x64
3Win32.Redl...sor.cs
windows10-2004-x64
3Win32.Redl...sor.cs
windows11-ltsc_2024-x64
3Win32.Redl...ery.cs
windows10-2004-x64
3Win32.Redl...ery.cs
windows11-ltsc_2024-x64
3Win32.Redl...ase.cs
windows10-2004-x64
3Win32.Redl...ase.cs
windows11-ltsc_2024-x64
3Win32.Redl...ute.cs
windows10-2004-x64
3Win32.Redl...ute.cs
windows11-ltsc_2024-x64
3Win32.Redl...ice.cs
windows10-2004-x64
3Win32.Redl...ice.cs
windows11-ltsc_2024-x64
3Win32.Redl...ngs.cs
windows10-2004-x64
3Win32.Redl...ngs.cs
windows11-ltsc_2024-x64
3Win32.Redl...als.cs
windows10-2004-x64
3Win32.Redl...als.cs
windows11-ltsc_2024-x64
3General
- Target Win32.RedlineStealer.a.7z
- Size 1.1MB
- Sample260718-jypjjsds8k
- SHA256 cc5a06c26f6cb1f5c90a9ca0931a332c165550533d54a0f225df27b82dc31ea7
- MD5 1621ef478475ff4b474a44f7cd67b8a5
- SHA1 607f2fc5e9edc7a0aceec7c9da45a287030ae4be
- SHA512 5d97bab5d327c5d09615b317fd049735bad97dd8ddb354e746755c9837c70939e400aa759c729a92be41262bfca1b97dbbe41eea70018c7c50cd62dc504c90cf
- SSDEEP 24576:9hyzDDGS2KoP9duwVS0/S2PH+Ty4zEiy9dFBT+eE9Y:iHDGSVq90wUda+TUtlBT+FY
- TLSH T1793533AD23C098B145CCBB5D9556EA3DCF34E69C4740E12167FA9E0814AA1AF0BDCD3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Win32.RedlineStealer.a.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Win32.RedlineStealer.a.7z
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiFirewallQuery.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiFirewallQuery.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCard.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCard.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCardQuery.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCardQuery.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapter.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapter.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterQuery.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterQuery.cs
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterType.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterType.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcess.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcess.cs
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessQuery.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessQuery.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessor.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessor.cs
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessorQuery.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessorQuery.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiQueryBase.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiQueryBase.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiResultAttribute.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiResultAttribute.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiService.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiService.cs
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
Win32.RedlineStealer.a/stub/RedLine.Models/ClientSettings.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Win32.RedlineStealer.a/stub/RedLine.Models/ClientSettings.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Win32.RedlineStealer.a/stub/RedLine.Models/Credentials.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Win32.RedlineStealer.a/stub/RedLine.Models/Credentials.cs
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Win32.RedlineStealer.a.7z
- Size 1.1MB
- SHA256 cc5a06c26f6cb1f5c90a9ca0931a332c165550533d54a0f225df27b82dc31ea7
- MD5 1621ef478475ff4b474a44f7cd67b8a5
- SHA1 607f2fc5e9edc7a0aceec7c9da45a287030ae4be
- SHA512 5d97bab5d327c5d09615b317fd049735bad97dd8ddb354e746755c9837c70939e400aa759c729a92be41262bfca1b97dbbe41eea70018c7c50cd62dc504c90cf
- SSDEEP 24576:9hyzDDGS2KoP9duwVS0/S2PH+Ty4zEiy9dFBT+eE9Y:iHDGSVq90wUda+TUtlBT+FY
- TLSH T1793533AD23C098B145CCBB5D9556EA3DCF34E69C4740E12167FA9E0814AA1AF0BDCD3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiFirewallQuery.cs
- Size 215B
- SHA256 cae27a727c4a04a4781ac3b782c7f5c36dc1a8af2639ecf16ba57be22efbf6a8
- MD5 af384bca0fa3ab369f2feb18219a49e3
- SHA1 fc4957eecd6a4b68f68e37ea465f900157edbf99
- SHA512 e20d81370fbd58b9cd451be51095b4936e34fc63220384151bebb50787bfa70ed0559cadb256ac69c3d72c79f26433ccad1e258e13fdf30b9b216511cdeac886
- TLSH T10CD0A98589A309D96B6BB34281708BD63CA23446BEF02AE5ACF512210889408A32D0EA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCard.cs
- Size 560B
- SHA256 d4b8d25c7c73157201e2e7e1603dc225e7ae9887b2a78c58964eec76cb2cdf8b
- MD5 c76d3c25b620f209be17a08bbf3b2ee9
- SHA1 18f2e6b3d8a245077d9572f1e99c770979c8a6a4
- SHA512 5e71ac8b23747483045d75d31a619efee20a03ad18bfb92f6e3e787df2c8f38c38bc2656fd76169e534a069b291ed41c37c9f79d9eb0528a2b51caa72a5593b8
- TLSH T16EF0FC4B0A0345508D9B0EB0C976C5161CF57789676CEDBDDDED02551887C48C2797AE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiGraphicCardQuery.cs
- Size 234B
- SHA256 d2ceb62eac8de566309d812dac23140eceec2f74f43ca5c45dddf4bd692e8503
- MD5 a96a70bcd25048a621d7283299e4a8aa
- SHA1 3ee83598f7801774e839800e237d42e263cc6427
- SHA512 08cf0389c1656230c54ade353f0820a942d4bcf8056b243d913c20cf9197d47938826872a8caee6f0e0bccb40af3540e905fa444c982a18ee85c77c36662968d
- TLSH T1A9D09700C483C0BA0BEB1B009E30C6A128B13197ADA219BC1CA612398C084B016130F3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapter.cs
- Size 464B
- SHA256 56b4c8a420e907ec6d4256f1b9b37b95ef548b34d56bc1533ee76ca4b9226407
- MD5 ab1a047773f2120f570695bdf950871c
- SHA1 eccea5df9b97357019abe6d92684ffca18afa6b0
- SHA512 42ccc8039f484a96cfe1f67e622cba29794a4637300bab0251e239e14df3b48cd64ab150927bdf21ecbe940a8eac509beb05954a20ee2eb4ea8471ed06c1aa7d
- TLSH T15EF0A78B07472D555D1748B0C6B64A160DAA11C9E73EE6E3ACEC02801CD2C8C517E76E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterQuery.cs
- Size 598B
- SHA256 e8f5bce34e3967078df15b75a4ef23b6360fec931cd3a24f781fa73164273615
- MD5 8a0b40bfd4f13434ebdbeff7ccd84cc3
- SHA1 f97364e9f7ea60062a503afb9793d0b974bdebf1
- SHA512 e30655596e1c2889be8c91795349b723b487a765947bd3915e4bc3b212a96efb581c6539723acd706a21936a60b0e168fc4a732f9704599166eff42654296d4d
- TLSH T16EF02809710A65921B3B00488B70B3F1DBB1B104D62E59AB261AD31CE8E36A5B71E786
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiNetworkAdapterType.cs
- Size 103B
- SHA256 67539d0c93fcfef3b1d817d3cc88795cec639093ce3665229023763576ed21cd
- MD5 a01bc2d55a30c62f059df46bb84fd285
- SHA1 a959eb7e65e0a922fc5d50a5c5c6254eb315d731
- SHA512 1f80dba7e10c5178d2d491dba5a9c55feaf67cf48e1ddf473f44fd0db474e76c98dae101ced2af34b33e7ea2e80525c41c7426b4b0fa769f9eb7b5ecd99ed9fa
- TLSH T1D0B0124C029F5598A3274E8C636473B8886535824F45474314F113DC68A390A1CC455B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcess.cs
- Size 729B
- SHA256 87d39a75966aeeb0599aaf8c67be33448c5e3fd2972398c41dcdfa0cba157c92
- MD5 9655a98da4524c9548812a9ee524adcc
- SHA1 864a2c9a4309d9d3dc4ce292650f085690651281
- SHA512 16639f027167c928bd9200a99c2a63bf0008f62eef838fb1e97f0d01b09f5129abf4141832ae62b47d9117e1554d87f2a0dca37e969a7941bc35c13961936585
- TLSH T13501B18B03171A15C90E4EB0D1764A230DDA5A89B77DEDF3ECFD12401A86C4881BD7EE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessQuery.cs
- Size 580B
- SHA256 a095cc8d4df80367b039584276c6b2dfe19372a6b182cb1cf4a8b482a3b7e12d
- MD5 c5387764a2ef89f77b7f603150cb488d
- SHA1 7cf80ccf43b3c6a551a113f9275672f1e5de9d4d
- SHA512 1cb138311525e8c0c96f6125b4c5bd18de3fae229a4af01f7ca0d9ea892d8d4286ae32299caf2d2b96fdaca923ebd7f7be45e036032e81daefb5626c13b0df07
- TLSH T1E0F0AC14A10B47291EEE1900B8B489932EFB21266B7629F7F8F8E0109F584051075DF7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessor.cs
- Size 1KB
- SHA256 5276f6d082c4ff715c7eb23aef74dedec08a7035447041057101462c244b7810
- MD5 84df4aa6172e949b34b880f2b5fda0f8
- SHA1 7ad837fb9bf953f34143c1ca9616642575079577
- SHA512 1582699445d5ce5aaffda8d118cd33b754894bce9c6ab98355a7723a1f17675f6500483ee70e64fabd42d45d4c8401594879c6bc1080f51cdcb43146a72182c7
- TLSH T13721FB5F130305548D8E4EB0C07A8A131DD51B88E3BDEDF69DEE028909C7C4892BD7AE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiProcessorQuery.cs
- Size 323B
- SHA256 8859cb20dce05e0895d9527019339774f018edf7f012cab00d455dc56362f457
- MD5 21d3e5e1d162cba9a35d7c363dbcd579
- SHA1 7611b81616467e6e7e92471e6698439ddf477187
- SHA512 7a27460115551b0629c02ff4279fefe32a5c9c7e8f7055bcf57eb2887043995302cec249e8c34ca0b4b729e4b8039f9eca33d45150588fedf62ef39ed93ed99a
- TLSH T14FE02608674A00AF5AEF27203438828339D10A45EBB319B804D6901D1E9F8545143076
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiQueryBase.cs
- Size 384B
- SHA256 6908a1c11b604190f9a3239496db1d96a8b909d60f404be3609636f2191fb49d
- MD5 b7444a5563c5e841b46cbbe9f8c4e164
- SHA1 3281a904919f7cdda34a4a9696b9360c351b79f8
- SHA512 0240b78cdaf2ffb153e9828d05276e86fe31b3f59d9f0b40f4d934496ed01de2ef583e4e8dbce101c76ae44e5b67af7b10616c7709f6b5e0b450a044b69b3df3
- TLSH T1A0E09226511B84791DBE1143CCB47AF3B895210DAF7027E2B0ED43540153504B56A8A7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiResultAttribute.cs
- Size 275B
- SHA256 c80b082663912a32e25a07231729ee969b2dc6ff2c6d866ab55834d8a05d6788
- MD5 3bccb8f612e6b51ea0e2d61739b8915c
- SHA1 c84f0cb57a6e1400f502ecac5491452b05b9558f
- SHA512 a863344658f93edc0162eeaea21e146c695bee665eee7ccfed724f1f8b58697cd3c87b451e7c441bb55825d36d4315501dd2d87b3e8b3d077170cdcb6c541119
- TLSH T1A2D05E2953039B7A1D9E1651EDB0BCD9ACB524440A7A1EB0FBAC835B794990810358BF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models.WMI/WmiService.cs
- Size 2KB
- SHA256 39c89497b07c37104ba3ac078129bf1e14aad5ea2b0388748d24ba5a11cb4db2
- MD5 9f4e9b110757d90c168614121426b013
- SHA1 3c6386b1f6af5a61223a4b8495392036e666a16d
- SHA512 203eaf98221690d08597e0f894ac9093db0366fc4f5048c16949b265e7ba07e02fa28cbd20665a0a80c7dc5ac2b8e81eca769cea7fc5e4a216a6b834e88d5c96
- TLSH T19141CF08735EC67909E914C3E47079E8FC54BA0602BCA465FEFDC1A6D02ECE23A29477
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models/ClientSettings.cs
- Size 698B
- SHA256 079bc1f9867f5e82f8a680c11090a8c26e86e787bde97a621265d9a1bbad941c
- MD5 d58e4efbe7a3e20e7235aec9f8e0bb2d
- SHA1 88f9464a79efe96d4450c8cb764931b7cf0f88c8
- SHA512 833e10725a28056af95f76dcf2f36a160a4b65a68555e7ff3fa42716184a4e5403e267cde942db447781c0e75ce907b879f38c893a7b10190e80a0d1f08b2a89
- TLSH T19301F90F271B567544667BB2DC77CCC23E6EF785067740ACAC98C3894904CC262B5D9E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Win32.RedlineStealer.a/stub/RedLine.Models/Credentials.cs
- Size 4KB
- SHA256 ee524d939e09aa911a8024812af0b077c5c51673b3fe9baa025a68efc6d242dd
- MD5 95bd55355169427c0d9d9347842158b4
- SHA1 9a645168f7dd1ec1698ccd70bf34776abd650540
- SHA512 59048ed06864c0e1fc7d3cc5b76bfb882cbea2e14a803ad47addb3eaf7d9ac01626c926d55b1bfca0326b4687e5abf4eb20d4d1e8975edec826a6172dd7aab35
- SSDEEP 96:C4h4ip2nzDPIXM0kGlPzTpwI3WdmVmDy2GP3NBLDLH:VKNnPeMylPvS4siLfLH
- TLSH T158A1F345378E66DD14EE313BF832D494AE3DD791263640F8B4EB0255EC61D88E2688FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10