General
- Target 9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4
- Size 364KB
- Sample241109-3f2kyavbpd
- SHA256 0508e5e6f825b11ed8f23a3bfdf868e06513fce8a5db559bd96271f14cbbdd65
- MD5 7113f75072de52f2048a133ea00f6dde
- SHA1 9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4
- SHA512 97f5258aa59f898f1b71a814eab7dd81254f63694e7f5e2578d1685ca4d2ba50986db1ee500b44e04e184e0ad5b18ae08296b9d13b3b550e87dbb660ee22b56a
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4.exe
Resource
win7-20241023-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4
- Size 364KB
- SHA256 0508e5e6f825b11ed8f23a3bfdf868e06513fce8a5db559bd96271f14cbbdd65
- MD5 7113f75072de52f2048a133ea00f6dde
- SHA1 9640ceeffd2a5f7b21646ab2d3c64bf8f9fc60c4
- SHA512 97f5258aa59f898f1b71a814eab7dd81254f63694e7f5e2578d1685ca4d2ba50986db1ee500b44e04e184e0ad5b18ae08296b9d13b3b550e87dbb660ee22b56a
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family