General
- Target 3574a53de8aa43d20bd702e0738a5aaf70452c241af9a7bfc6d747da096bc3dc
- Size 307KB
- Sample241108-tal4mavflq
- SHA256 3574a53de8aa43d20bd702e0738a5aaf70452c241af9a7bfc6d747da096bc3dc
- MD5 9272e9cd8653c1c44d4457f0fa2ed72f
- SHA1 274257ac0af9d918a43173830a0df5144e0bde7c
- SHA512 8f6a5716c72c0eafa3ea03db84d7e1fead2079ecc23d431c5a925178cc659a925ff75f5a63060812b352781599d3a47d3a6f7d87c98cf75c9c23ffed69a4a37c
- SSDEEP 6144:jIkUMbi8PZIsnkJYBQBRJOV3ICDZU8m8CXMIYl+PBYtdyu0:EkUMu8PZbf6B3OCO+8l+5uyv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
Resource
win7-20240729-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
milaf
C2
-
193.233.20.5:4136
Attributes
-
auth_value
68aaee25afe3d0ae7d4db09dea02347c
Targets
-
- Target c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
- Size 425KB
- SHA256 c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61
- MD5 f912d133d6132ea163bff72ab484f11c
- SHA1 e1326fd027eb920e93253cc1c682af00df092a1a
- SHA512 375ef264bc8626456fbaa87653994295dc1fd3d955136649d154f2d1ead1a0735cc743b96e0e4cd2dc6d60d9041292608a1b8423325aa311166738452cc5076e
- SSDEEP 6144:fIFULM4lS9t8u9+HAndTOcFii5sHPvrZm69/CJTk637eQfnd5gWB:fIFUI4s9GQKSfyrs69CJb7d5g
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family