Resubmissions
26-05-2024 14:07
240526-re128sha21 1026-05-2024 14:07
240526-reyl4sha2z 126-05-2024 14:06
240526-res2mahg52 126-05-2024 14:06
240526-reqw9shg48 126-05-2024 14:05
240526-rd5n2agh9s 126-05-2024 14:05
240526-rd2blshg35 126-05-2024 14:05
240526-rdxnesgh8v 126-05-2024 14:05
240526-rdt8asgh71 126-05-2024 14:04
240526-rdpykshg28 126-05-2024 14:04
240526-rdlwxsgh7w 1General
-
Target
https://mega.nz/file/ylcXkL4D#OYrzXbo7t_dGAzkttfOi1S8O--PmvaR-5c0w6_6UhJQ
-
Sample
240526-re128sha21
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/ylcXkL4D#OYrzXbo7t_dGAzkttfOi1S8O--PmvaR-5c0w6_6UhJQ
Resource
win10v2004-20240426-en
18 signatures
300 seconds
Malware Config
Extracted
Family
redline
Botnet
123
C2
147.185.221.19:64245
Targets
-
-
Target
https://mega.nz/file/ylcXkL4D#OYrzXbo7t_dGAzkttfOi1S8O--PmvaR-5c0w6_6UhJQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Executes dropped EXE
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-