General
- Target file.exe
- Size 364KB
- Sample221116-twcr3sga3t
- SHA256 39e4e3cf526808ba99d2b7228550e7520d04f758d3d6e0bb01100cf1546f74ce
- MD5 005be31a15cf7d717bdf58245ca28eb6
- SHA1 525997438de138ec3e9c1e1dc5a703adb6a9f6bd
- SHA512 a14fce325043e70b9e0dea39fd0d99551f3b5e612cf39860b5c124649cb25872c318e4886b92972cf549c01235974343941dfec34ac87e1f17aa6daa77dc23e0
- SSDEEP 6144:ukp+LNxlTw9BOKmqsN8gqdhkdye1r1Yjje58pHruXBRjzdj:uk4JPTw9oqsKgqyP0j9H+ft
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
neruz
C2
-
193.106.191.27:47242
Attributes
-
auth_value
0169a8759f3c9be473f782b96a6ff704
Targets
-
- Target file.exe
- Size 364KB
- SHA256 39e4e3cf526808ba99d2b7228550e7520d04f758d3d6e0bb01100cf1546f74ce
- MD5 005be31a15cf7d717bdf58245ca28eb6
- SHA1 525997438de138ec3e9c1e1dc5a703adb6a9f6bd
- SHA512 a14fce325043e70b9e0dea39fd0d99551f3b5e612cf39860b5c124649cb25872c318e4886b92972cf549c01235974343941dfec34ac87e1f17aa6daa77dc23e0
- SSDEEP 6144:ukp+LNxlTw9BOKmqsN8gqdhkdye1r1Yjje58pHruXBRjzdj:uk4JPTw9oqsKgqyP0j9H+ft
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.