General
- Target b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0
- Size 432KB
- Sample241107-gjm13awkc1
- SHA256 b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0
- MD5 c4c7e637bc377ce0cef893de5f9c27ab
- SHA1 af2ff7275f1dca451a8ea3add6ca26cf56fbac7a
- SHA512 9a0902746a3f86eb853fa00bd288d2a28e88bc72d341cbf85e3ecc5477b4405a903e92987330af2fa0c84e15636e201e50324de3810902477dc0150f31342f3b
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0
- Size 432KB
- SHA256 b319003e079ffe13a2785bacf30a9a198fcca9ddb543fc5601f20c43104427c0
- MD5 c4c7e637bc377ce0cef893de5f9c27ab
- SHA1 af2ff7275f1dca451a8ea3add6ca26cf56fbac7a
- SHA512 9a0902746a3f86eb853fa00bd288d2a28e88bc72d341cbf85e3ecc5477b4405a903e92987330af2fa0c84e15636e201e50324de3810902477dc0150f31342f3b
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family