General
- Target 5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
- Size 272KB
- Sample241108-bwkhtascnf
- SHA256 5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
- MD5 a569e271c4bfee807a1bf5743808520b
- SHA1 bd329f497e1044c39439e5abb4bf7b38c28c6f66
- SHA512 e7a2f00e347b4165cd699135d3edc209be7dc3d48c33aab714151bfc5274e7443ec01db52a608d2b8c9f8b7a7a36d6c59f043409b0a035354f5b537ec20fdf38
- SSDEEP 6144:NuPVgJp8boDRB7HkMK6nIlPB3LvdsyfzBzKNPJBi7NPcXBYNNU9:Nvf8Y7EuIlZdnrFgx47tcxZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
193.106.191.30:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target 5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361
- Size 330KB
- SHA256 5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361
- MD5 63e9d77e94253f7bc52083eaba402994
- SHA1 f1443410775377ee4298b251ee8ac15ff8539636
- SHA512 7db138dffaeee5fc9f9cffe3a3f95ffd621122e8db5704168fe10c35b740126657012fa47139d33d33e468e6170e600a22224d85b2e724f79ab0fba93e5dbcc7
- SSDEEP 6144:/HDkOSBM35FMK6nElPB3L/dsyfzBnKNPJBo7NPcfBgad279:/dSBMPuEl1dnrVgxq7tcfGr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family