General
- Target 1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed
- Size 433KB
- Sample241108-scm82athqa
- SHA256 1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed
- MD5 99304de4281e9a414b7e58bba39763e4
- SHA1 4120605167cb62597a303dc7ad30c9d35ce21eb6
- SHA512 c5aff9e228bb4583ca6f3ea35060428f46c8d038aed41a362c3b03c5dc2534a422bda165b2050fb4f9e857dbb5a03db1b3a383957efdd9090e0a191ff0a790e8
- SSDEEP 6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed
- Size 433KB
- SHA256 1230122ea6b9c28369e1862ddfcbbd928c480b650b1667cd9e8efadf1e7769ed
- MD5 99304de4281e9a414b7e58bba39763e4
- SHA1 4120605167cb62597a303dc7ad30c9d35ce21eb6
- SHA512 c5aff9e228bb4583ca6f3ea35060428f46c8d038aed41a362c3b03c5dc2534a422bda165b2050fb4f9e857dbb5a03db1b3a383957efdd9090e0a191ff0a790e8
- SSDEEP 6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family