General
- Target b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d
- Size 340KB
- Sample241109-brplzathmq
- SHA256 b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d
- MD5 55476f656c168e3a9513638778c68521
- SHA1 992f2208842636e109a5405c6a0c4bff8a3b55fe
- SHA512 88765c9d65378ce38a0af32861b02144397e8ae02ff22cab093c481cad88ca88117adcae4f849e42b4c3abf37db39ac21d2e2908f45b2d0e6e297162f849d14d
- SSDEEP 6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d.exe
Resource
win7-20241010-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d.exe
Resource
win10v2004-20241007-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
24.01
C2
-
37.220.86.164:29170
Attributes
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Targets
-
- Target b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d
- Size 340KB
- SHA256 b0eccb4aeceb91a9abe1f01fb283809eae256a86d5113eeb82533a8d268c1b2d
- MD5 55476f656c168e3a9513638778c68521
- SHA1 992f2208842636e109a5405c6a0c4bff8a3b55fe
- SHA512 88765c9d65378ce38a0af32861b02144397e8ae02ff22cab093c481cad88ca88117adcae4f849e42b4c3abf37db39ac21d2e2908f45b2d0e6e297162f849d14d
- SSDEEP 6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Redline family