General
- Target 7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a
- Size 433KB
- Sample241109-1j4hlashnn
- SHA256 7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a
- MD5 ed3305ae2c259860d795a874836694e2
- SHA1 c668f5c8042311f75de577106d5e6c0da3fcb5a3
- SHA512 9183b5ea475333fe096c4df2c007e11e55dd8dfa81e1634c19fde99f167a1f5897a9f8735ff6902165170296d9750df0e11c92dcda4233761a47e5d00a64e7a5
- SSDEEP 6144:FkedgevvvIm6t1uVWIad8Ko0aY2xxoNr/psbefV3uu1Hbs/rzte:2edKT/Iqow6oNr/psbet3uuts/rzE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a
- Size 433KB
- SHA256 7972ca184f55ed7354526cafbd9581cca2a7e7d78731b1edb4dee07ed5e3cd4a
- MD5 ed3305ae2c259860d795a874836694e2
- SHA1 c668f5c8042311f75de577106d5e6c0da3fcb5a3
- SHA512 9183b5ea475333fe096c4df2c007e11e55dd8dfa81e1634c19fde99f167a1f5897a9f8735ff6902165170296d9750df0e11c92dcda4233761a47e5d00a64e7a5
- SSDEEP 6144:FkedgevvvIm6t1uVWIad8Ko0aY2xxoNr/psbefV3uu1Hbs/rzte:2edKT/Iqow6oNr/psbet3uuts/rzE
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family