General
- Target 4805c092dc064668d391be0e533854f2.exe
- Size 388KB
- Sample220901-jh4njaacdn
- SHA256 ce54ef80e1fae6878e8a78d8ffbbc9bf22b7d0c2a647ccfc55eecfe695019568
- MD5 4805c092dc064668d391be0e533854f2
- SHA1 c6db3740bae3c601358ff934e38b70bbf4e964e1
- SHA512 5c6932a90cacaa64f2dc576842609a07a13a682b01f962acc17ebe5d8bd9116bebe69e8d06a816ca27166dd7835ca76346fd89a8ec639e2b84c6aaf4bae4348c
- SSDEEP 6144:+dnLDKiQiTowyEB58pR/hEZ1cED3InxRlGMJ9wb58xtLe:+dnHKom/c1dD3InV3wWXL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
4805c092dc064668d391be0e533854f2.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4805c092dc064668d391be0e533854f2.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cspace
C2
-
clitspace.com:80
Attributes
-
auth_value
aa25c0a7500ac071e2027483d14b1d31
Targets
-
- Target 4805c092dc064668d391be0e533854f2.exe
- Size 388KB
- SHA256 ce54ef80e1fae6878e8a78d8ffbbc9bf22b7d0c2a647ccfc55eecfe695019568
- MD5 4805c092dc064668d391be0e533854f2
- SHA1 c6db3740bae3c601358ff934e38b70bbf4e964e1
- SHA512 5c6932a90cacaa64f2dc576842609a07a13a682b01f962acc17ebe5d8bd9116bebe69e8d06a816ca27166dd7835ca76346fd89a8ec639e2b84c6aaf4bae4348c
- SSDEEP 6144:+dnLDKiQiTowyEB58pR/hEZ1cED3InxRlGMJ9wb58xtLe:+dnHKom/c1dD3InV3wWXL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.