General
- Target 22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34
- Size 360KB
- Sample241109-lq8csssdka
- SHA256 22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34
- MD5 73a219bc8575c06857a079b6dbea19c7
- SHA1 7f8bfefe4f804a9d24ca0f4fba5ef581b4c01c47
- SHA512 92f23f504c49f70cef726ef97add8249982d7d09e50bd460821f216536ed8124e352288db3fe65145b6446160c8315792a5ac3ef319f95d4fa2192ce47f9c6d7
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34.exe
Resource
win7-20240903-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34
- Size 360KB
- SHA256 22cb48145343f7cb060de353df19ad549e5280cd4a5c0f35171752195eb30f34
- MD5 73a219bc8575c06857a079b6dbea19c7
- SHA1 7f8bfefe4f804a9d24ca0f4fba5ef581b4c01c47
- SHA512 92f23f504c49f70cef726ef97add8249982d7d09e50bd460821f216536ed8124e352288db3fe65145b6446160c8315792a5ac3ef319f95d4fa2192ce47f9c6d7
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family