General
- Target ab40480a9c1b3193776a08b435cff077954b9e25
- Size 364KB
- Sample241109-vbydqa1len
- SHA256 0e68710d5e6bde595ba9b0479aad25fe23a567f85004f881a1edd521e98eb98d
- MD5 503e302fac6553c0ddba5b420b073187
- SHA1 ab40480a9c1b3193776a08b435cff077954b9e25
- SHA512 da4cf297d880797bd74f50941f177b7a448204f74d3f25d4ddaea6b36b054812db10c2aefe4679fba94cfc374b307bfd1983ac69a7968290132fae21608efe3d
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ab40480a9c1b3193776a08b435cff077954b9e25.exe
Resource
win7-20240729-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab40480a9c1b3193776a08b435cff077954b9e25.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target ab40480a9c1b3193776a08b435cff077954b9e25
- Size 364KB
- SHA256 0e68710d5e6bde595ba9b0479aad25fe23a567f85004f881a1edd521e98eb98d
- MD5 503e302fac6553c0ddba5b420b073187
- SHA1 ab40480a9c1b3193776a08b435cff077954b9e25
- SHA512 da4cf297d880797bd74f50941f177b7a448204f74d3f25d4ddaea6b36b054812db10c2aefe4679fba94cfc374b307bfd1983ac69a7968290132fae21608efe3d
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family