General
- Target 3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c
- Size 433KB
- Sample241107-mstsvsznfv
- SHA256 3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c
- MD5 2b159e9fd444c974b425e01b01039ad7
- SHA1 1ec76361198cb52834a7b0dabc072e3de8f53e87
- SHA512 d0400a4ece6b51bb53b3b60be179aeb2475d4dea9c1c54462ae78cf598207d58b9e7bb9f4b9ac7778e1a733e4170921d7db5387e6c179aea7e91728f5b6b6b84
- SSDEEP 6144:AdToZq3KGUE6ySWgZk589XDR8JuLLH2PRpm7oio4AylG8Tqpx:KTn4E6y+k58dGQX2PRpm7/o4AD8Tq/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c
- Size 433KB
- SHA256 3c868bfbe2560fbed12c86dc7e432aa67dad87d92a7772ad595bdcac14e00a7c
- MD5 2b159e9fd444c974b425e01b01039ad7
- SHA1 1ec76361198cb52834a7b0dabc072e3de8f53e87
- SHA512 d0400a4ece6b51bb53b3b60be179aeb2475d4dea9c1c54462ae78cf598207d58b9e7bb9f4b9ac7778e1a733e4170921d7db5387e6c179aea7e91728f5b6b6b84
- SSDEEP 6144:AdToZq3KGUE6ySWgZk589XDR8JuLLH2PRpm7oio4AylG8Tqpx:KTn4E6y+k58dGQX2PRpm7/o4AD8Tq/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family