General
- Target 86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2
- Size 360KB
- Sample241107-rlht8ssrcv
- SHA256 f785dd8bb02ddc91b33d57c9f32c85ca454eb8bce08c933be2188b73af27099e
- MD5 4e9e1902036180cb47703b0233a6ba2c
- SHA1 86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2
- SHA512 02b0ba47bcdbb2e02bd58651962936c3bcaefd40e741fbacb152939b82ea92beccb153456e382ad0d73565b0a50154c5d6119f3fe9a9e7a94a32a07d87b1e9b0
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2.exe
Resource
win7-20240729-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2
- Size 360KB
- SHA256 f785dd8bb02ddc91b33d57c9f32c85ca454eb8bce08c933be2188b73af27099e
- MD5 4e9e1902036180cb47703b0233a6ba2c
- SHA1 86ff2558c6fdc8ab9bea8e63819ad8cc6ce0b2e2
- SHA512 02b0ba47bcdbb2e02bd58651962936c3bcaefd40e741fbacb152939b82ea92beccb153456e382ad0d73565b0a50154c5d6119f3fe9a9e7a94a32a07d87b1e9b0
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family