RedLine Stealer malware
RedLine is a .NET information stealer sold as malware-as-a-service. It collects browser credentials, cookies, crypto wallets and system information, and reports to a C2 configured in the binary.
Malva.RE has analysed 71 public samples tagged RedLine Stealer, statically and without execution. The latest public sample was seen on 2026-10-19.
File types
- PE Executable38
- ZIP Archive2
Recurring C2 endpoints
196[.]251[.]107[.]104:19121176[.]46[.]152[.]46:19111
Defanged. Extracted statically from the configurations of public samples.
Latest public RedLine Stealer samples
Analyse your own RedLine Stealer sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free