General
- Target 3a88c9e93e212834a66d3ec8a9f8947b6db8bec3
- Size 360KB
- Sample241109-hcelsasmdp
- SHA256 13131cd00a66124ae6bd97bf797075139c24594035e48cd1bf2d0612559babe1
- MD5 35d1cda1d202eb4d3b5b644a88770d4a
- SHA1 3a88c9e93e212834a66d3ec8a9f8947b6db8bec3
- SHA512 6738cd86b6665b6707594b76f359c814e07e0ac0651da84c0c5c6d94ecad4cd592bf6808be95163f592ab41fbfef75c4eb8b9e1e4cdc0ec2367f6a9ba6872489
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
3a88c9e93e212834a66d3ec8a9f8947b6db8bec3.exe
Resource
win7-20240729-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a88c9e93e212834a66d3ec8a9f8947b6db8bec3.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 3a88c9e93e212834a66d3ec8a9f8947b6db8bec3
- Size 360KB
- SHA256 13131cd00a66124ae6bd97bf797075139c24594035e48cd1bf2d0612559babe1
- MD5 35d1cda1d202eb4d3b5b644a88770d4a
- SHA1 3a88c9e93e212834a66d3ec8a9f8947b6db8bec3
- SHA512 6738cd86b6665b6707594b76f359c814e07e0ac0651da84c0c5c6d94ecad4cd592bf6808be95163f592ab41fbfef75c4eb8b9e1e4cdc0ec2367f6a9ba6872489
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family