General
- Target file.exe
- Size 303KB
- Sample221107-vknwmsbcdm
- SHA256 03ede89c1f4d46233ff3e0b334d2e0e1a4b8f88a75105926b1df68cfa63cea2c
- MD5 64abc01d601faf34c8353e9098789af8
- SHA1 b68339d322ddc53b81adaa93488434372b266272
- SHA512 6131cd840dda77ee644d6328fca98e674f145595f6451dbd7a0aea16ecbc02cf70ca16c9214fbe7880e2c751f80fab873a755a552d91eecd8e723c546eba21e7
- SSDEEP 6144:g+C4cLe+RKVZc5UuLk2sFnXvzHPGpZKgMW3MLJ:ZcC+RgZnXrPWMt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 303KB
- SHA256 03ede89c1f4d46233ff3e0b334d2e0e1a4b8f88a75105926b1df68cfa63cea2c
- MD5 64abc01d601faf34c8353e9098789af8
- SHA1 b68339d322ddc53b81adaa93488434372b266272
- SHA512 6131cd840dda77ee644d6328fca98e674f145595f6451dbd7a0aea16ecbc02cf70ca16c9214fbe7880e2c751f80fab873a755a552d91eecd8e723c546eba21e7
- SSDEEP 6144:g+C4cLe+RKVZc5UuLk2sFnXvzHPGpZKgMW3MLJ:ZcC+RgZnXrPWMt
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.