General
- Target file.exe
- Size 303KB
- Sample221107-ymhzysfag2
- SHA256 b26d033d8dea5cc1fbe345fd24e38ce8bdec7f4a1c9a71406c0dacc7bf5c8722
- MD5 cb9fe574bf731166fcf0f448335dbb36
- SHA1 3d2543cc78863be4c1a06a418c4919126afd4196
- SHA512 68553e5a37c7878707acc83832a9ee797558205bc2f1b2b8c61e5d6867d416f2d4bec2a95430840cda1a7d21958fa91daafe4283cd7b1e30454afb907612762b
- SSDEEP 6144:xtLpsmgzjSus8UNJmS2hYZQc8ZEiLenJ6P0af:zemgzj4NJD2Icen4PL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 303KB
- SHA256 b26d033d8dea5cc1fbe345fd24e38ce8bdec7f4a1c9a71406c0dacc7bf5c8722
- MD5 cb9fe574bf731166fcf0f448335dbb36
- SHA1 3d2543cc78863be4c1a06a418c4919126afd4196
- SHA512 68553e5a37c7878707acc83832a9ee797558205bc2f1b2b8c61e5d6867d416f2d4bec2a95430840cda1a7d21958fa91daafe4283cd7b1e30454afb907612762b
- SSDEEP 6144:xtLpsmgzjSus8UNJmS2hYZQc8ZEiLenJ6P0af:zemgzj4NJD2Icen4PL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.