General
- Target file.exe
- Size 320KB
- Sample221107-mlhf9abgb8
- SHA256 d60886e8a1fe36b1024ffce774f5d240c5177362530b32cf3f0c36d067842253
- MD5 6fd1b136d48f67e7eaa29c170f5b54d0
- SHA1 117ce7fb8e9a2b48e6bf96c1aca5fc249a958a41
- SHA512 2d853a65fefe3da241123fdbe9daa232eb92154f1b5ad7bea42ad3c67fff08f86eba69adbf6c18336e71cd1bbd3ff1ce021bd332955f30158f49100122d6d863
- SSDEEP 6144:vqeIBnhNLo+FoxPW95fHcIBCky+ks7/pCRQSgtGgkoVtqpY4u:vUhNPYPW9Z8Q7URQSgYcqe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 320KB
- SHA256 d60886e8a1fe36b1024ffce774f5d240c5177362530b32cf3f0c36d067842253
- MD5 6fd1b136d48f67e7eaa29c170f5b54d0
- SHA1 117ce7fb8e9a2b48e6bf96c1aca5fc249a958a41
- SHA512 2d853a65fefe3da241123fdbe9daa232eb92154f1b5ad7bea42ad3c67fff08f86eba69adbf6c18336e71cd1bbd3ff1ce021bd332955f30158f49100122d6d863
- SSDEEP 6144:vqeIBnhNLo+FoxPW95fHcIBCky+ks7/pCRQSgtGgkoVtqpY4u:vUhNPYPW9Z8Q7URQSgYcqe
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.