General
- Target file.exe
- Size 303KB
- Sample221107-3dphlaedg7
- SHA256 ba122f53dd92c7e3ced6166bc98254eaf8b349418ff39791977c6edfe4e1e1d7
- MD5 0a8e1befef3d6b6ec49bd9e44fb6e74a
- SHA1 0e75779e20ecd5f6b96ce183084bce019b2e9f3f
- SHA512 ded435a962a8e7cc3043e956a13436872b2215bab8664771442de56e31aa97df7c5ce9ba8fd49dafddb1e0773db898666ae58273bcbb40821ea0bd7ed866f203
- SSDEEP 6144:RLgwMC/qXDthy77voRT3MF8JWxDPnChjVFoG6bao2XrdurXfWraaEoz:R0wMC/ofy3cT3x1IG6bqXrdubeea
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 303KB
- SHA256 ba122f53dd92c7e3ced6166bc98254eaf8b349418ff39791977c6edfe4e1e1d7
- MD5 0a8e1befef3d6b6ec49bd9e44fb6e74a
- SHA1 0e75779e20ecd5f6b96ce183084bce019b2e9f3f
- SHA512 ded435a962a8e7cc3043e956a13436872b2215bab8664771442de56e31aa97df7c5ce9ba8fd49dafddb1e0773db898666ae58273bcbb40821ea0bd7ed866f203
- SSDEEP 6144:RLgwMC/qXDthy77voRT3MF8JWxDPnChjVFoG6bao2XrdurXfWraaEoz:R0wMC/ofy3cT3x1IG6bqXrdubeea
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.