General
- Target 151ddda3b2ed3551e5c29745c0c78cee02c642bee627ba1829921bdebb3dc2ca
- Size 361KB
- Sample241109-h7wtjssram
- SHA256 151ddda3b2ed3551e5c29745c0c78cee02c642bee627ba1829921bdebb3dc2ca
- MD5 e36beb80569600acbb82e72ce9b0c856
- SHA1 43dbd5bb36a923fe464de9348869e149d9b0b02d
- SHA512 9ecb5dbdad473ed864efb3f9bf7467e6eb586baa00c90e519c4ee4719d79bcc1d8cf73400fc430ad451b351d7cf614ad79b8935de98c99c2eba36c35ccd21aa9
- SSDEEP 6144:OHiu7klJfcP3vX1IUmzI+1Pg7l7uWQrgl5xEt+2tB8UrNChBlELcP:OHClS3KP8aPIu1r8D0NChjELm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
d7b731af07c7cd86b2d25c314ef0bff43e3c935daddc6d6d60a2efb8c3fa91c7.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
d7b731af07c7cd86b2d25c314ef0bff43e3c935daddc6d6d60a2efb8c3fa91c7.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
193.106.191.30:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target d7b731af07c7cd86b2d25c314ef0bff43e3c935daddc6d6d60a2efb8c3fa91c7
- Size 483KB
- SHA256 d7b731af07c7cd86b2d25c314ef0bff43e3c935daddc6d6d60a2efb8c3fa91c7
- MD5 91e0e1506ae78aa35eb712c6df7e49b6
- SHA1 ad3f92ea2cedade84df73b39d39b7fda29c64f33
- SHA512 1dede49f32e07150f59fadf68ec0e0135a7e3780ee0e9d8e0aa2b8166ed2459c37edd67c8cc92fbcce2792365051aa3bec6acd75d028367cb88c624c5793cf94
- SSDEEP 6144:mAU2J4L1H24CvX1IMmzIg1Pg7lDuWqrgl5gz0rz656BYschVVPE+O1voXc:a2JGEK38kPau9rUKQyvDO
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family