General
- Target 8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641
- Size 364KB
- Sample241109-blwhbstjay
- SHA256 8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641
- MD5 a2ab6cc520530e357026b3c8be1797c9
- SHA1 49885a8f564d4ed6452720bfe259aa5d5dbaffc1
- SHA512 2efc0db8be9c532198b3549bbdab06ec1a956817dded6e85ba0474ea7d10c7653655c11b117b883da31d639e8b56a228b4fe04a8a6d963251fc12bfc4900ad7a
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641.exe
Resource
win7-20240903-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641
- Size 364KB
- SHA256 8645e5c77e148ee800717b084790506f71e2d5a3ca9d31dcfa3007d313a59641
- MD5 a2ab6cc520530e357026b3c8be1797c9
- SHA1 49885a8f564d4ed6452720bfe259aa5d5dbaffc1
- SHA512 2efc0db8be9c532198b3549bbdab06ec1a956817dded6e85ba0474ea7d10c7653655c11b117b883da31d639e8b56a228b4fe04a8a6d963251fc12bfc4900ad7a
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family