General
- Target file.exe
- Size 302KB
- Sample221108-l8hj4abcc3
- SHA256 a8da239db280476e5a3e459db590debe9dd9ce97617e34f4f61ff9d170c4c76c
- MD5 3c6a0f6817abebdc2c67bd403d2e9efb
- SHA1 2f89355900e813df0c3b12c1a03ec5c8a50a109b
- SHA512 880c5ce3485b4d8b8f10a5e45a50b95141524f8cce29e782b09c7e6f1f42ef2dbe5bad1c3e909d648860d2b1356fe1b4ca00d1db2a7250a31840005f893a328b
- SSDEEP 6144:IjLrkL8DxJyBSyEgSCTM8e5nq15GwHbN5FuQolx7t94:Ij3kADXy6ZC48eRq18abFuQo7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 302KB
- SHA256 a8da239db280476e5a3e459db590debe9dd9ce97617e34f4f61ff9d170c4c76c
- MD5 3c6a0f6817abebdc2c67bd403d2e9efb
- SHA1 2f89355900e813df0c3b12c1a03ec5c8a50a109b
- SHA512 880c5ce3485b4d8b8f10a5e45a50b95141524f8cce29e782b09c7e6f1f42ef2dbe5bad1c3e909d648860d2b1356fe1b4ca00d1db2a7250a31840005f893a328b
- SSDEEP 6144:IjLrkL8DxJyBSyEgSCTM8e5nq15GwHbN5FuQolx7t94:Ij3kADXy6ZC48eRq18abFuQo7
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.