General
- Target e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f
- Size 273KB
- Sample241105-fd3c5avdnc
- SHA256 e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f
- MD5 a2a13ca1dbad58dc131434883f3d3eab
- SHA1 c2d52efe4fd63e8601fb1c0d59c2c9e94b499f84
- SHA512 a36cb9e82ba792796353cbd581b3932dd59c991d19b4b8dd811f16f741437fc669781e20a830ae249d09c8e06499a7413402b2ccf4751231dcd80930162d830b
- SSDEEP 6144:j8qL1OPq9S9LzZB4z16XgrVVED7jgxr23r3VwGB:oqcPq9S1ZB4z1+grAD3gxib9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f
- Size 273KB
- SHA256 e37f8b80c9639133acac7f05bbce85f1a91f635842f6348c3c517446d500b67f
- MD5 a2a13ca1dbad58dc131434883f3d3eab
- SHA1 c2d52efe4fd63e8601fb1c0d59c2c9e94b499f84
- SHA512 a36cb9e82ba792796353cbd581b3932dd59c991d19b4b8dd811f16f741437fc669781e20a830ae249d09c8e06499a7413402b2ccf4751231dcd80930162d830b
- SSDEEP 6144:j8qL1OPq9S9LzZB4z16XgrVVED7jgxr23r3VwGB:oqcPq9S1ZB4z1+grAD3gxib9
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family