General
- Target c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012
- Size 423KB
- Sample241108-dd9fbstfkq
- SHA256 c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012
- MD5 814f1fdc7776fa034a7a42afdfbaf038
- SHA1 b213c3ce075817c36273e0df3e02b104b47f31d7
- SHA512 1f3ff7a591b5492626047b969b8e9568b7b79b85fbc162a9886e0cb490a8766183cc4fec0f97478441a34d63a3678ce143b3c6fbf6a116f4968884485f849eba
- SSDEEP 6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
1
C2
-
45.9.20.59:46287
Attributes
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
- Target c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012
- Size 423KB
- SHA256 c33b2f77bab82ada015915943bb8a1be7655a7e06ec33775f82f436d106f0012
- MD5 814f1fdc7776fa034a7a42afdfbaf038
- SHA1 b213c3ce075817c36273e0df3e02b104b47f31d7
- SHA512 1f3ff7a591b5492626047b969b8e9568b7b79b85fbc162a9886e0cb490a8766183cc4fec0f97478441a34d63a3678ce143b3c6fbf6a116f4968884485f849eba
- SSDEEP 6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family