General
- Target f03ad9185b3f1efa2ab14f3cbe8e2f3d
- Size 360KB
- Sample241108-wmml2awkfw
- SHA256 d637fd844cde1e811f68067d325e2683dce48240940d412e35dc94b87981a6a0
- MD5 f03ad9185b3f1efa2ab14f3cbe8e2f3d
- SHA1 594245f4300889aeeb3617ea718fc1051c868675
- SHA512 50a83c438167710ba0c10a3a41c18f4bfb27e49e0b0cfb506e78fd59a7ec7751a98db71e66f0fc907e51865caa76e8fe02f6a1bdd330e352338e807333e3d99d
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
f03ad9185b3f1efa2ab14f3cbe8e2f3d.exe
Resource
win7-20241010-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f03ad9185b3f1efa2ab14f3cbe8e2f3d.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target f03ad9185b3f1efa2ab14f3cbe8e2f3d
- Size 360KB
- SHA256 d637fd844cde1e811f68067d325e2683dce48240940d412e35dc94b87981a6a0
- MD5 f03ad9185b3f1efa2ab14f3cbe8e2f3d
- SHA1 594245f4300889aeeb3617ea718fc1051c868675
- SHA512 50a83c438167710ba0c10a3a41c18f4bfb27e49e0b0cfb506e78fd59a7ec7751a98db71e66f0fc907e51865caa76e8fe02f6a1bdd330e352338e807333e3d99d
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family