General
- Target 5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517
- Size 432KB
- Sample241107-k7mxraslap
- SHA256 5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517
- MD5 64f17a15096bc25427e5427e28fb57cd
- SHA1 c09ba6ad45b18b206310c86a0495a4638bc17336
- SHA512 b57e21f4614d5f66b9d06005c666a582b72b8535dc74a830dce55b7b86aacc4f8b6c0b5ddfb6c209ad106eec09609fc4530bc27ec25410ef93309773768e14c4
- SSDEEP 6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517
- Size 432KB
- SHA256 5e96799c10fb9d00486f2a038cbcdfe2a6c1484370e1ba0a4bd376a34083c517
- MD5 64f17a15096bc25427e5427e28fb57cd
- SHA1 c09ba6ad45b18b206310c86a0495a4638bc17336
- SHA512 b57e21f4614d5f66b9d06005c666a582b72b8535dc74a830dce55b7b86aacc4f8b6c0b5ddfb6c209ad106eec09609fc4530bc27ec25410ef93309773768e14c4
- SSDEEP 6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family