General
- Target 5e2f59ef0e7426d0f7bb52b299e1f644115bf3cf48db8d4e662ae35fad143378
- Size 282KB
- Sample241109-mdfmpa1ret
- SHA256 5e2f59ef0e7426d0f7bb52b299e1f644115bf3cf48db8d4e662ae35fad143378
- MD5 b8a870f608592eb378c945a659883c75
- SHA1 5082424c33d763cfaafde8890ff37b0928b59239
- SHA512 3692356f229caccc6bc337f31f18cd37ab14a9d50ff8e8dc98cca9c1d60f1c21049d070da0e32beec00c17dc64dec63bc050cf3d22eea63dff0a1b4f47de2b33
- SSDEEP 6144:NPhyKHEHzWWg6jtC+usEHoVMdPodPGhUvoOVAk/o:BhyhU6j1RGv1vhUxo
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@2023@New
C2
-
91.215.85.155:32796
Attributes
-
auth_value
0be5b9b84cd5b707e91a48e341e3f7d7
Targets
-
- Target 609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7
- Size 381KB
- SHA256 609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7
- MD5 9ab3ed9b7bc742444a15c21c8b105276
- SHA1 3072cc9c9e6a34a5bf092343a58e99cda6129430
- SHA512 983731a35b8ef86f0299c665b30687f115547f6922b0b06d5731585edcd5eda597035f5b81a32c056b41da70097d0b65d3214e985008ea285f632b3898294c18
- SSDEEP 6144:MMpMtC+usuHoVMdPolPe3VeQjDpgpRjFE:MMpM1R8v1/3V1DSL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family