General
- Target 01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b
- Size 434KB
- Sample241109-azyzyatcmd
- SHA256 01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b
- MD5 c26256a144faa5a4580c43f8065cdef1
- SHA1 fbd082323a98a87fe055358091e693bc1ef26f0d
- SHA512 4c179af5e17a16fd8e44be5920c97ce944bed080fbffd0158290730c0e3dd9e3fe5ce22bcd3859fad13f76f3aa838a9d9c6a17c1e2717865e2950a9a6a0084f4
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b
- Size 434KB
- SHA256 01cecebe2fec1d85cdc3795707046fa369140db07007d7cc46954041b541ff3b
- MD5 c26256a144faa5a4580c43f8065cdef1
- SHA1 fbd082323a98a87fe055358091e693bc1ef26f0d
- SHA512 4c179af5e17a16fd8e44be5920c97ce944bed080fbffd0158290730c0e3dd9e3fe5ce22bcd3859fad13f76f3aa838a9d9c6a17c1e2717865e2950a9a6a0084f4
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family