General
- Target 550be03f911c130db5c75a8485f35684
- Size 364KB
- Sample241109-cbf6bsvcpg
- SHA256 90288d3be6e5bb37ca5044d9e9fa962a9ba83d172069539112c070a11b3a3e18
- MD5 550be03f911c130db5c75a8485f35684
- SHA1 a4ed3a367ae571bcb33ac71bde59d0f7fef0ef6d
- SHA512 c4ac73e5b507fb4dce2e60229b2ab95a19f5fcc028d4965af104096bee9e95e1353bdbbf3ab299b82e7f1cf193d2898653be044a547f433a4bdc040008dc65e9
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
550be03f911c130db5c75a8485f35684.exe
Resource
win7-20240903-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
550be03f911c130db5c75a8485f35684.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 550be03f911c130db5c75a8485f35684
- Size 364KB
- SHA256 90288d3be6e5bb37ca5044d9e9fa962a9ba83d172069539112c070a11b3a3e18
- MD5 550be03f911c130db5c75a8485f35684
- SHA1 a4ed3a367ae571bcb33ac71bde59d0f7fef0ef6d
- SHA512 c4ac73e5b507fb4dce2e60229b2ab95a19f5fcc028d4965af104096bee9e95e1353bdbbf3ab299b82e7f1cf193d2898653be044a547f433a4bdc040008dc65e9
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family