General
- Target e1d539dc95192c9c1be684f92754f47fad376745
- Size 271KB
- Sample241109-m8fwyatbqa
- SHA256 3d0d6648cc44a6c5e783e8c7cf8867773ac8be7c5161e6dfb4d692367b191ef6
- MD5 c57840b9d08e3928549b6b5f9163f8c8
- SHA1 e1d539dc95192c9c1be684f92754f47fad376745
- SHA512 367c9350979c2f5bf561542a15ca684500039a8eee0968c7e93e30b8037318236b2aff74ba8c5d125a7b2f5daf5640d1019a99aef326aa46fb82e0956801681b
- SSDEEP 6144:KbvBA5mYYHCkPeK9hrhkJnzbi6h1j2rJRDnIWPBxQe:ovG5IHD9RmFV29RDIoBf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
91.212.166.11:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target 07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736
- Size 350KB
- SHA256 07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736
- MD5 3fb70716445e5012c74ce98636fbfd9f
- SHA1 1b6cf158fc8480bc51ae6bf3c77b13ae853c68ea
- SHA512 d5b58ce6d0f913655af6aac0928f07b970f1ef3549cbf7e4831d8a3befb3f25660ee3317465ef907f70a503ac82a03261ab72a649c06dda938c396170f1901c8
- SSDEEP 6144:szLeroLKHANcQCkPe89hrhkJXzbi6p1h2rJRDnIYnt6Kr2cdI/:szqrIK6r9R81X29RDIYtjr2
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family