General
- Target 5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4
- Size 436KB
- Sample241109-pg3yhaxkcm
- SHA256 5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4
- MD5 85c86237524ac1f59391e87779478efa
- SHA1 61836ea0078dc663df22ff198b554808e2f453a2
- SHA512 a2110506bec890e41f825c2dea5e062fdb0ce0fb3b93ac4289f72ea96f12fadd51169d02655f619dad0adfe063a190ae375ee1147dbd5f6560a2582a667412af
- SSDEEP 6144:X/0waUW+rJNWUeGxIasIAzQ58Kw1s84Ytb12vohdyWCkEq/a172N:dJNteAMISQaK784Ytb1QohdskEq2
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4
- Size 436KB
- SHA256 5975584288b9b08b109571d8d7b2b95425d4691d997831c84b9506afd39315c4
- MD5 85c86237524ac1f59391e87779478efa
- SHA1 61836ea0078dc663df22ff198b554808e2f453a2
- SHA512 a2110506bec890e41f825c2dea5e062fdb0ce0fb3b93ac4289f72ea96f12fadd51169d02655f619dad0adfe063a190ae375ee1147dbd5f6560a2582a667412af
- SSDEEP 6144:X/0waUW+rJNWUeGxIasIAzQ58Kw1s84Ytb12vohdyWCkEq/a172N:dJNteAMISQaK784Ytb1QohdskEq2
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family