General
- Target dd4cb5245e8040d454e2a41e41b50baa.exe
- Size 413KB
- Sample230208-xe7snsee24
- SHA256 b0634d85ec75045ffc2b38e22e4724a2cdcc8418bb604bab635f866d7c8d1cae
- MD5 dd4cb5245e8040d454e2a41e41b50baa
- SHA1 7a69de994120ec59adf5184a0ebeff206139a449
- SHA512 793a28610f2819dd9f18061c079f2dd42482dc59852e2cbc2ebea17cafc67fa9d7c0155f2cb2eeead217f650a8c6e1c1be4cea031f5aeea209641c9ff5e4c892
- SSDEEP 3072:Ew9qBGdvwXR5bMCv5tPYqxQHWxZtDjGVBD322unATSCYj2D0J/Ou2eOV32WByUAU:Ewq4UR7YHH+gGVnS3v0wu25GWUjsTIu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
dd4cb5245e8040d454e2a41e41b50baa.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd4cb5245e8040d454e2a41e41b50baa.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
roma
C2
-
193.233.20.7:4131
Attributes
-
auth_value
f099c2cf92834dbc554a94e1456cf576
Targets
-
- Target dd4cb5245e8040d454e2a41e41b50baa.exe
- Size 413KB
- SHA256 b0634d85ec75045ffc2b38e22e4724a2cdcc8418bb604bab635f866d7c8d1cae
- MD5 dd4cb5245e8040d454e2a41e41b50baa
- SHA1 7a69de994120ec59adf5184a0ebeff206139a449
- SHA512 793a28610f2819dd9f18061c079f2dd42482dc59852e2cbc2ebea17cafc67fa9d7c0155f2cb2eeead217f650a8c6e1c1be4cea031f5aeea209641c9ff5e4c892
- SSDEEP 3072:Ew9qBGdvwXR5bMCv5tPYqxQHWxZtDjGVBD322unATSCYj2D0J/Ou2eOV32WByUAU:Ewq4UR7YHH+gGVnS3v0wu25GWUjsTIu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload