General
- Target fb2c1a55b38a17dcb25c05b4aacb4443.exe
- Size 389KB
- Sample220901-jptrxaccg9
- SHA256 235667aad7d9f703f1042e857b70bfb7b9b0b2b5bcde1af6fe63663a02064a5b
- MD5 fb2c1a55b38a17dcb25c05b4aacb4443
- SHA1 975192ae5e1bb2a4c4a894066c6043642d4906d5
- SHA512 2076f8227e362543529019a285ed84d4396539818d7d0a7de718fc24f0ef7b41126317c1606373d673c36f50b66b8fe13ea49023fc9d2e63a3367d8b2f5714fb
- SSDEEP 6144:wZD3Lyc+bvl7wKOZJpwcAeR6XbOcaFmEJGc7vmI//u6PPL:wJ2c+bvlbOZJAeR6XbOcQTDD//9L
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
fb2c1a55b38a17dcb25c05b4aacb4443.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fb2c1a55b38a17dcb25c05b4aacb4443.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cspace
C2
-
clitspace.com:80
Attributes
-
auth_value
aa25c0a7500ac071e2027483d14b1d31
Targets
-
- Target fb2c1a55b38a17dcb25c05b4aacb4443.exe
- Size 389KB
- SHA256 235667aad7d9f703f1042e857b70bfb7b9b0b2b5bcde1af6fe63663a02064a5b
- MD5 fb2c1a55b38a17dcb25c05b4aacb4443
- SHA1 975192ae5e1bb2a4c4a894066c6043642d4906d5
- SHA512 2076f8227e362543529019a285ed84d4396539818d7d0a7de718fc24f0ef7b41126317c1606373d673c36f50b66b8fe13ea49023fc9d2e63a3367d8b2f5714fb
- SSDEEP 6144:wZD3Lyc+bvl7wKOZJpwcAeR6XbOcaFmEJGc7vmI//u6PPL:wJ2c+bvlbOZJAeR6XbOcQTDD//9L
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.