General
- Target af2126e78a2a6badb8da7606afc3ed86
- Size 271KB
- Sample241109-relbsawcjp
- SHA256 777829f145e5c2bf2358535fcb2c0b986caabbe7c3fbdc3095d57c1a9556aaa5
- MD5 af2126e78a2a6badb8da7606afc3ed86
- SHA1 bfb33dc78ca909904b248eeb0f15ea084f7c1ede
- SHA512 699dafabc9b624fc78bd45ba778914501922d59a2a52fbf89f5fe9d30e82618005ff81519fb3dba575ca43a826696e01231f4b32e4d8ec67644c2ba91ac606d2
- SSDEEP 6144:0WZ8rxRjUfTCgG+pSOVtbzSaoDgz3IFiJkTRdzTxtuTAnC+QR:VYxACtODCHDgz4AeRdzTCcCn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
91.212.166.11:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target 8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3
- Size 350KB
- SHA256 8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3
- MD5 57da7c4673e1c0a9e45f8f4ed89663dc
- SHA1 09a4bc6695f55846fc00420e85fd711a2a07d04d
- SHA512 ccaa617631a28370ce07a6eb3ee924f0297c38667e3335582e8d04f3c7b06a1ca89fe64329a96d1ffe2af888224680df2aef85445f7a93baf8b73753577c5f59
- SSDEEP 6144:+ELiQaBQWSOVtbHSaoDoz3IJiJknRdzTx3jnTmiEWh:+E2QaBsOD+HDoz4McRdzTJjTm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family