General
- Target b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92
- Size 293KB
- Sample241108-ck95rsshkd
- SHA256 b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92
- MD5 484161c32cf18cf3187b431ecc10ad42
- SHA1 b3111277b12eb304c25d599cb993931b27d976a6
- SHA512 e36c5bcbc0597dc84eadee39663661e3870b029b547cb9b54a2d9584dad3905e7d82783516eb31f981daaac4d19e0b5444061fd4e3d3fcc460ac22fd465b6b56
- SSDEEP 6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.168:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92
- Size 293KB
- SHA256 b061272c317dc5795d265f11fcfa5a262afead8653cfb64e5ef36e7dfe2f5c92
- MD5 484161c32cf18cf3187b431ecc10ad42
- SHA1 b3111277b12eb304c25d599cb993931b27d976a6
- SHA512 e36c5bcbc0597dc84eadee39663661e3870b029b547cb9b54a2d9584dad3905e7d82783516eb31f981daaac4d19e0b5444061fd4e3d3fcc460ac22fd465b6b56
- SSDEEP 6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family