General
- Target cfa267a1ea788c8cfd217ff09e852c9a
- Size 364KB
- Sample241109-e1tttszphl
- SHA256 3d73dc88d75b5f7ba71139083c5a8cc5df4f7dee20831d47851a8e7832819f73
- MD5 cfa267a1ea788c8cfd217ff09e852c9a
- SHA1 66f5e6303c761d905a4817eb79430a877947b181
- SHA512 e2033f87def6cd5720f9f06760bbb54adedb011dca3ea5450f8698128aae330ecb704e555bcb9ee98573bfbfdbe8ad5441b64dd653dd6aeecd2b7aa76da8ba9c
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
cfa267a1ea788c8cfd217ff09e852c9a.exe
Resource
win7-20240708-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfa267a1ea788c8cfd217ff09e852c9a.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target cfa267a1ea788c8cfd217ff09e852c9a
- Size 364KB
- SHA256 3d73dc88d75b5f7ba71139083c5a8cc5df4f7dee20831d47851a8e7832819f73
- MD5 cfa267a1ea788c8cfd217ff09e852c9a
- SHA1 66f5e6303c761d905a4817eb79430a877947b181
- SHA512 e2033f87def6cd5720f9f06760bbb54adedb011dca3ea5450f8698128aae330ecb704e555bcb9ee98573bfbfdbe8ad5441b64dd653dd6aeecd2b7aa76da8ba9c
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family