General
- Target 4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8
- Size 296KB
- Sample241105-pdmgca1aqf
- SHA256 4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8
- MD5 e2f96990c0a0af9e89b3616ee01a1103
- SHA1 a7678ea712df24ae636547c83d4b80190ec76faa
- SHA512 6e8938ea653f6402852e16118becf75fade1dd4e172c23fe9ed0d2247a2bdf38b7db98bbfaa9d7112a8de19223cf02a3d43040aeced3e415bc86e8f5b90337d2
- SSDEEP 3072:NGqTvLbdHHEeusRqXuEq4ymYq3vq6cAPgBqbN/hxVZ02/isjQn1DrvVP1YkrzpiI:RlkHbCcq6caaq9DVS9vV9YOz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
91.212.166.11:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target 4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8
- Size 296KB
- SHA256 4af9a822f179369503b5055fbffe8b8afaa516183aef717867362355c87bebc8
- MD5 e2f96990c0a0af9e89b3616ee01a1103
- SHA1 a7678ea712df24ae636547c83d4b80190ec76faa
- SHA512 6e8938ea653f6402852e16118becf75fade1dd4e172c23fe9ed0d2247a2bdf38b7db98bbfaa9d7112a8de19223cf02a3d43040aeced3e415bc86e8f5b90337d2
- SSDEEP 3072:NGqTvLbdHHEeusRqXuEq4ymYq3vq6cAPgBqbN/hxVZ02/isjQn1DrvVP1YkrzpiI:RlkHbCcq6caaq9DVS9vV9YOz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family