General
- Target c34e045a064988e362e72970b2c8f067c99a6b48
- Size 377KB
- Sample241109-31bv1sxphp
- SHA256 44208647d6d3358280c54fb8b19bfa5528d01fddf9415637ea4a7c4cdcc2a777
- MD5 6d27578850ddf860b0ce547e91c6c0bd
- SHA1 c34e045a064988e362e72970b2c8f067c99a6b48
- SHA512 4cd3f11aa5f8ef80142f5f7cd29a6be07bd47d0159b62faa59e142a956a17888cb71f82f6a54e8e5554c0c62d9460e63f85d12e27cb7584957d385e4bcfb2847
- SSDEEP 6144:8Clzi9/MaL1wX8O2oJXVW0cYKpfOGhz4D+z56h8QWHU:8Clzi9rBwX8hoJX4RPGGyDs6hU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c34e045a064988e362e72970b2c8f067c99a6b48.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
c34e045a064988e362e72970b2c8f067c99a6b48.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target c34e045a064988e362e72970b2c8f067c99a6b48
- Size 377KB
- SHA256 44208647d6d3358280c54fb8b19bfa5528d01fddf9415637ea4a7c4cdcc2a777
- MD5 6d27578850ddf860b0ce547e91c6c0bd
- SHA1 c34e045a064988e362e72970b2c8f067c99a6b48
- SHA512 4cd3f11aa5f8ef80142f5f7cd29a6be07bd47d0159b62faa59e142a956a17888cb71f82f6a54e8e5554c0c62d9460e63f85d12e27cb7584957d385e4bcfb2847
- SSDEEP 6144:8Clzi9/MaL1wX8O2oJXVW0cYKpfOGhz4D+z56h8QWHU:8Clzi9rBwX8hoJX4RPGGyDs6hU
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family