General
- Target 5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6
- Size 434KB
- Sample241108-rm4hbstejf
- SHA256 5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6
- MD5 dc9d25d10b77d715c0e5f4d9b75cf5ac
- SHA1 7a29f5df7be8049b4c9c282f36cb140c48ead488
- SHA512 f4ad9aa78b28a395c8823067942a79137596141b10ae5488dc7c8a95952139f44f36d2f5255cdcd034c00998068fff91408cfa8945d811d535962565091d18c8
- SSDEEP 12288:OIVUIC/qcIs72/cPQIInQAoqMQdds+4R:OKUIC/2CPQVQdW3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6
- Size 434KB
- SHA256 5ef2f6f823902810cde8ed2d560dca1a89d3d7c09f7c4b92aca41860212581c6
- MD5 dc9d25d10b77d715c0e5f4d9b75cf5ac
- SHA1 7a29f5df7be8049b4c9c282f36cb140c48ead488
- SHA512 f4ad9aa78b28a395c8823067942a79137596141b10ae5488dc7c8a95952139f44f36d2f5255cdcd034c00998068fff91408cfa8945d811d535962565091d18c8
- SSDEEP 12288:OIVUIC/qcIs72/cPQIInQAoqMQdds+4R:OKUIC/2CPQVQdW3
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family