General
- Target 71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba
- Size 287KB
- Sample241109-z616baseqa
- SHA256 71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba
- MD5 47bd01cb1d905bb9d30901471cf88c45
- SHA1 1e9132f53eb49b7d00cd009d9773ca54757b275d
- SHA512 82bde95b20be2eafeeda8daf1def2ee23c68fea931a197487932a8a28a2df51c95bb66a18e084119f4158edf54689a1f9e276fd23393a0e41c0cf493c7abd1fd
- SSDEEP 6144:q8qL1Obq8+80T6tPZO0jalKzoXQ8t/3nz9mqok7vRZuzbgwu9snB:xqcbq8+8K0u7Q8t/5xbunnp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba
- Size 287KB
- SHA256 71d6e21768efefc47febea57fc0500ccc91ea70ffedbf5766465a053385da5ba
- MD5 47bd01cb1d905bb9d30901471cf88c45
- SHA1 1e9132f53eb49b7d00cd009d9773ca54757b275d
- SHA512 82bde95b20be2eafeeda8daf1def2ee23c68fea931a197487932a8a28a2df51c95bb66a18e084119f4158edf54689a1f9e276fd23393a0e41c0cf493c7abd1fd
- SSDEEP 6144:q8qL1Obq8+80T6tPZO0jalKzoXQ8t/3nz9mqok7vRZuzbgwu9snB:xqcbq8+8K0u7Q8t/5xbunnp
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family