General
- Target 9a6e7bccca09da33513bdc4d85a949c4
- Size 251KB
- Sample241109-tetz2axflm
- SHA256 faa900a7e6258d67290c3f377e227f72f52877f57d8b3d5941011e5cb00c310f
- MD5 9a6e7bccca09da33513bdc4d85a949c4
- SHA1 6880a20bf3fc1d5fa058f91a01f3869115a7ec69
- SHA512 1778b91b3023614eaacf3295bebf139c92657c5dad271c6aa8c4ceab36a10df3b2ed87c0054479cd9796fa38158e64c382c2a01ca7838afc441bab4706596e17
- SSDEEP 6144:5kO9iV8kpL86Pk9sv1tnKSiBkUk3pYtiS/gjuQ:R968kLVJ1sBIOt8juQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0add68b0957c112d886bcaee0b5b24a4f354135272d32c2e4490145d7b3ff6ba.exe
Resource
win7-20241010-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0add68b0957c112d886bcaee0b5b24a4f354135272d32c2e4490145d7b3ff6ba.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Newe
C2
-
89.208.106.66:4691
Attributes
-
auth_value
e7141b98243e53ec71dadf6344aff038
Targets
-
- Target 0add68b0957c112d886bcaee0b5b24a4f354135272d32c2e4490145d7b3ff6ba
- Size 328KB
- SHA256 0add68b0957c112d886bcaee0b5b24a4f354135272d32c2e4490145d7b3ff6ba
- MD5 b8da2a1a6e93b5e2847ea5703ec6bda4
- SHA1 7a70d0f5bef7f2e98ddaa6890044c8b9057b1581
- SHA512 59d9a9ebc4ad3786469435411df6117efece63e4fc51ea3ba3f887123c6a3c59155454b5dba7d88ebf336c6dbe4200f4ce6238a010ea2a950eb677f86e2a37db
- SSDEEP 3072:7XFqloLWSPL5xqp/CES8hbv08twLeKScBMDUzRzs3p42nglBVbOSlTpsojc:T1LXPJsv1tnKScBkUm3pYNiS5c
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family