General
- Target 5ea1d9a728886c0b988139d58491ce1e.exe
- Size 392KB
- Sample220830-ha681sebf8
- SHA256 78f9b1706c10d0d739bd4e3269bfee86f690db7f98edd27ee9c500b24837bca9
- MD5 5ea1d9a728886c0b988139d58491ce1e
- SHA1 5d09cf20d519e8838aa990569d1cb57e982b638f
- SHA512 035a0e8d1c4ec08c59eb301b802a7feed43fcdad243ddb0ef75be2d37a64838913095bece63a0e5932f5bc2b854db30216edd5c7378c90af2e6412f3282cb980
- SSDEEP 6144:BX/4YEGLgeWow0Sbt3aPXMJNrSpQrwD/oOfddp86odAo+9M:5/46nXPst3aPXErei4/Bfddpo4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
5ea1d9a728886c0b988139d58491ce1e.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ea1d9a728886c0b988139d58491ce1e.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cspace
C2
-
clitspace.com:80
Attributes
-
auth_value
aa25c0a7500ac071e2027483d14b1d31
Targets
-
- Target 5ea1d9a728886c0b988139d58491ce1e.exe
- Size 392KB
- SHA256 78f9b1706c10d0d739bd4e3269bfee86f690db7f98edd27ee9c500b24837bca9
- MD5 5ea1d9a728886c0b988139d58491ce1e
- SHA1 5d09cf20d519e8838aa990569d1cb57e982b638f
- SHA512 035a0e8d1c4ec08c59eb301b802a7feed43fcdad243ddb0ef75be2d37a64838913095bece63a0e5932f5bc2b854db30216edd5c7378c90af2e6412f3282cb980
- SSDEEP 6144:BX/4YEGLgeWow0Sbt3aPXMJNrSpQrwD/oOfddp86odAo+9M:5/46nXPst3aPXErei4/Bfddpo4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.