#ioc#redline-stealer
Overview
Indicators of compromise associated with RedLine Stealer. 12 indicators listed below, linked to the G1004 adversary profile.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| md5_hash | 8c21b2fbded2faeb6db2e7a20c513cdb | July 20, 2026 | 95% |
| sha256_hash | b59653f1e2b8dae784ca4211199d2887ea676d27e7af9d057a625cf9281c17e0 | July 20, 2026 | 95% |
| sha1_hash | 38b837cc5fe814ca9580f9029386aa405f8e94df | July 20, 2026 | 95% |
| ip:port | 194.156.79.151:55615 | July 19, 2026 | 100% |
| sha1_hash | 9139a0817ef5a3c0f4e97e562c22b2bb878d981a | July 14, 2026 | 95% |
| md5_hash | 6b1a870bc9aa0a5d88931278f4375f50 | July 14, 2026 | 95% |
| sha256_hash | 7b2a28e5ecbdeb4e608026e8c548ef5f50e4aad5da5ae7bfcc5e9ee05e91e80a | July 14, 2026 | 95% |
| sha256_hash | 7fc964fe47e08d13c158f808d0d68f3f2b9341dfb1ba6fb2a48690fe27e22682 | July 14, 2026 | 95% |
| sha1_hash | 78ea202006943110cb3d7559fc1bb7c4fe08755f | July 14, 2026 | 95% |
| md5_hash | 72aa3594e47ab58aecf445d9703f6c43 | July 14, 2026 | 95% |
| ip:port | 195.177.94.16:1912 | July 14, 2026 | 75% |
| ip:port | 94.154.32.144:1912 | July 14, 2026 | 100% |
Related content