General
- Target 65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2
- Size 432KB
- Sample241108-v3nctsynak
- SHA256 65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2
- MD5 f23a39a038650f8509af9652ba9c2915
- SHA1 24119bf890c17ed8897b85774637d05b3ae3b602
- SHA512 a1658a790d898d2777d9d4890fe0b362c123ea6de8daaf0b4cd72779ed0ec3a4d17d5dea2acbe8cb77144b61624904732ac7ff133e93a42d427553980ee2a65d
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2
- Size 432KB
- SHA256 65804b1343f311763bcc19faecd5eb241e5ce79d3d3d4284aa2c8873ebd52ef2
- MD5 f23a39a038650f8509af9652ba9c2915
- SHA1 24119bf890c17ed8897b85774637d05b3ae3b602
- SHA512 a1658a790d898d2777d9d4890fe0b362c123ea6de8daaf0b4cd72779ed0ec3a4d17d5dea2acbe8cb77144b61624904732ac7ff133e93a42d427553980ee2a65d
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family