General
- Target 689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3
- Size 394KB
- Sample241108-bw6faascpd
- SHA256 689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3
- MD5 399d8c651fbe8b71a02727a3d3be03a2
- SHA1 5356a83fad39b9feea3f22f8947c194e77e71397
- SHA512 a24cb07830bfcdd416259462b5ae03bdc93a5c027a80ad9d970e00b88b879e4142652868dadc8735bd0e4a348f912de1f0652ddd3558eeb5f2e9f8fa32e9432f
- SSDEEP 6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3
- Size 394KB
- SHA256 689c90f25399859cc568983894ee67260f847a2438ec578294598886d8c28cc3
- MD5 399d8c651fbe8b71a02727a3d3be03a2
- SHA1 5356a83fad39b9feea3f22f8947c194e77e71397
- SHA512 a24cb07830bfcdd416259462b5ae03bdc93a5c027a80ad9d970e00b88b879e4142652868dadc8735bd0e4a348f912de1f0652ddd3558eeb5f2e9f8fa32e9432f
- SSDEEP 6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family