General
- Target 035d18e9df0ec835205c3f0e1ee50f02
- Size 183KB
- Sample231229-zer4bshca2
- SHA256 6a5c67e0c4cb743ef58e0b246b34948af254e4ac9c317d38fe285856d83d3479
- MD5 035d18e9df0ec835205c3f0e1ee50f02
- SHA1 725861e06cbe9cb382edda415ccf64bdb486a224
- SHA512 1dd3133dc482a906ced0e37ed249ccfe18a28cf6c39104ff69cae83f8f9eaeb140daa361364ee6a939a9d1015f1a1ee917081b57d5d38bd47796ce317dab4875
- SSDEEP 3072:UDKW1LgppLRHMY0TBfJvjcTp5XZPLNuaF7LvzeGybp5Hg:UDKW1Lgbdl0TBBvjc/ZPLNuoT+HA
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
035d18e9df0ec835205c3f0e1ee50f02.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
035d18e9df0ec835205c3f0e1ee50f02.exe
Resource
win10v2004-20231222-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Chasemafia1
C2
-
185.234.247.50:55567
Targets
-
- Target 035d18e9df0ec835205c3f0e1ee50f02
- Size 183KB
- SHA256 6a5c67e0c4cb743ef58e0b246b34948af254e4ac9c317d38fe285856d83d3479
- MD5 035d18e9df0ec835205c3f0e1ee50f02
- SHA1 725861e06cbe9cb382edda415ccf64bdb486a224
- SHA512 1dd3133dc482a906ced0e37ed249ccfe18a28cf6c39104ff69cae83f8f9eaeb140daa361364ee6a939a9d1015f1a1ee917081b57d5d38bd47796ce317dab4875
- SSDEEP 3072:UDKW1LgppLRHMY0TBfJvjcTp5XZPLNuaF7LvzeGybp5Hg:UDKW1Lgbdl0TBBvjc/ZPLNuoT+HA
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
SectopRAT payload