General
- Target file.exe
- Size 303KB
- Sample221108-nbd7hsfbhn
- SHA256 cf2135d7a2b677f062e8f8913598a9a92fed692528fa78fd809f99f66856e898
- MD5 232724546b0bbf40caede44c86caba19
- SHA1 a3fa60da9e1b130f6f92148833f21824837ff0a7
- SHA512 5ab9dbc7b2499f504c19e544918347179e89a7ec67841593f08864dbb1352316efd3705a1a57617c8d006938922003c470d6b1093d6bf657957663874cfe4189
- SSDEEP 6144:BpLW6DR1x+R7IoTeFWiVYtDOwD29yCRnSiAuE+3MwRop0:BpK6DR1sR7IoT3Z8wDgyCRSiBMVp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
suk
C2
-
193.106.191.25:47242
Attributes
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
- Target file.exe
- Size 303KB
- SHA256 cf2135d7a2b677f062e8f8913598a9a92fed692528fa78fd809f99f66856e898
- MD5 232724546b0bbf40caede44c86caba19
- SHA1 a3fa60da9e1b130f6f92148833f21824837ff0a7
- SHA512 5ab9dbc7b2499f504c19e544918347179e89a7ec67841593f08864dbb1352316efd3705a1a57617c8d006938922003c470d6b1093d6bf657957663874cfe4189
- SSDEEP 6144:BpLW6DR1x+R7IoTeFWiVYtDOwD29yCRnSiAuE+3MwRop0:BpK6DR1sR7IoT3Z8wDgyCRSiBMVp
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.