General
- Target 683bddebfee0964969656a1aee116b371106a14b7b1fcf14d3514c0b0490ee06
- Size 414KB
- Sample231114-p4ty4sbc45
- SHA256 683bddebfee0964969656a1aee116b371106a14b7b1fcf14d3514c0b0490ee06
- MD5 f7e21a258100b6e4e900b26e48e778ca
- SHA1 cc56d92ae93e99d8f00d42bae7c5ca9bbeee4fab
- SHA512 99f6c2ae750a519c378e6c6f813f9d74865a974d46a2bee7c14c15f9bb7e217cdd8a11a794a9425716d0bfc48c30eca8b84fa0e936477c74391b14545081e596
- SSDEEP 6144:UFUnkAlR2SaOmUPvbeAOpTw080iIwK5cqTlXoSimOA/l:ZnkaR2Vke409DxoSv9d
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
683bddebfee0964969656a1aee116b371106a14b7b1fcf14d3514c0b0490ee06.exe
Resource
win10v2004-20231023-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target 683bddebfee0964969656a1aee116b371106a14b7b1fcf14d3514c0b0490ee06
- Size 414KB
- SHA256 683bddebfee0964969656a1aee116b371106a14b7b1fcf14d3514c0b0490ee06
- MD5 f7e21a258100b6e4e900b26e48e778ca
- SHA1 cc56d92ae93e99d8f00d42bae7c5ca9bbeee4fab
- SHA512 99f6c2ae750a519c378e6c6f813f9d74865a974d46a2bee7c14c15f9bb7e217cdd8a11a794a9425716d0bfc48c30eca8b84fa0e936477c74391b14545081e596
- SSDEEP 6144:UFUnkAlR2SaOmUPvbeAOpTw080iIwK5cqTlXoSimOA/l:ZnkaR2Vke409DxoSv9d
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext