General
- Target 2236ecffd5af7b52947799bdeb4cfbdf.exe
- Size 459KB
- Sample231006-rjed2aef58
- SHA256 ee5471b7ef93ad78fb2bba31698d905c7883bfcd3c8aa8b30cb22fa21debfce3
- MD5 2236ecffd5af7b52947799bdeb4cfbdf
- SHA1 28b0ed4319f85f1642d9cc2c190338f7a0e54051
- SHA512 a6ce1a5887a5090be17a0a6f769ae4e96f27b0463490f45763fd86b63511b4e45dea02ca15deacd57217edcdfa0bed90933d2bb5f0b3c3f75c43d92a54e7b1e1
- SSDEEP 12288:8f+8DPjjb/OdWazzs4kiUwRRlRFluG6vhXX:8f+8Xj4zJRRlI3X
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2236ecffd5af7b52947799bdeb4cfbdf.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2236ecffd5af7b52947799bdeb4cfbdf.exe
Resource
win10v2004-20230915-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
frant
C2
-
77.91.124.55:19071
Targets
-
- Target 2236ecffd5af7b52947799bdeb4cfbdf.exe
- Size 459KB
- SHA256 ee5471b7ef93ad78fb2bba31698d905c7883bfcd3c8aa8b30cb22fa21debfce3
- MD5 2236ecffd5af7b52947799bdeb4cfbdf
- SHA1 28b0ed4319f85f1642d9cc2c190338f7a0e54051
- SHA512 a6ce1a5887a5090be17a0a6f769ae4e96f27b0463490f45763fd86b63511b4e45dea02ca15deacd57217edcdfa0bed90933d2bb5f0b3c3f75c43d92a54e7b1e1
- SSDEEP 12288:8f+8DPjjb/OdWazzs4kiUwRRlRFluG6vhXX:8f+8Xj4zJRRlI3X
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext