General
- Target 1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2
- Size 394KB
- Sample241108-2cfzds1dpg
- SHA256 1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2
- MD5 1780f6f5b71b697f97a46377a4d19fb7
- SHA1 26b4c723478e0ec26d89574dd9c99fb18d3c95ca
- SHA512 0a4997107dd6504c3426f4a4c264803f693c3e99b6a2a463ed43c268be033e92b908fcff15d8eb60b0f810ec27a2fb5ce8a3833e655c1d5c29b5123743f2deda
- SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2.exe
Resource
win7-20240708-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2
- Size 394KB
- SHA256 1a90324dc8f51f116f5013180d834b56ed084645da822b79b8de75c44b5c62e2
- MD5 1780f6f5b71b697f97a46377a4d19fb7
- SHA1 26b4c723478e0ec26d89574dd9c99fb18d3c95ca
- SHA512 0a4997107dd6504c3426f4a4c264803f693c3e99b6a2a463ed43c268be033e92b908fcff15d8eb60b0f810ec27a2fb5ce8a3833e655c1d5c29b5123743f2deda
- SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family