General
- Target 548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42
- Size 287KB
- Sample241107-lekglaypg1
- SHA256 548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42
- MD5 02c83d921f1a456d436bf7ef63ef9fc0
- SHA1 1f29f2d4298147fba980ecada87c26ccf69db185
- SHA512 c35c36510199896f7cdb074b4f47532a9fbf0120ac844dfa0984c3119a2913b2cada94892c41cb0a4981f7651c6cce8f10ef66162758fd696cb23aba9e29bb7f
- SSDEEP 6144:Z8qL1ObqYbAiSCTmxTPj/0rtsvBS+5pTuzbgwuko6OB:mqcbquAGQTPgrtscURunnro6O
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42
- Size 287KB
- SHA256 548e258873244d8a78c5d50294c6d71337b33d6ab1f65d3827ed6d7c3b131d42
- MD5 02c83d921f1a456d436bf7ef63ef9fc0
- SHA1 1f29f2d4298147fba980ecada87c26ccf69db185
- SHA512 c35c36510199896f7cdb074b4f47532a9fbf0120ac844dfa0984c3119a2913b2cada94892c41cb0a4981f7651c6cce8f10ef66162758fd696cb23aba9e29bb7f
- SSDEEP 6144:Z8qL1ObqYbAiSCTmxTPj/0rtsvBS+5pTuzbgwuko6OB:mqcbquAGQTPgrtscURunnro6O
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family