General
- Target 351072e067f02a5afb3ffbf0fe94b92d
- Size 208KB
- Sample241110-btsfmswfll
- SHA256 cef9886ef9f6d468fdddc6edb7f48c2a8dfbb7ebda56406f627b284f47038ddf
- MD5 351072e067f02a5afb3ffbf0fe94b92d
- SHA1 679e8d8d27584f139d4276cad494b8e839425a07
- SHA512 9d55b2c32fea2fd72519c7c1fdbe2419c9a4eef8283d904a54cdf5fe218f6b1ac9ee2b517262b4b07efcfc009654170126a3fc505a2649af5fc683799aa7dc00
- SSDEEP 3072:vg5Vw/aZA694eU05HxbWhsurIUvDVRtR2UP0tchUe/C+I4M:vgA/KRUiH90rIUbLach3id
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
351072e067f02a5afb3ffbf0fe94b92d.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
351072e067f02a5afb3ffbf0fe94b92d.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
lend1m
C2
-
38.91.106.103:35459
Attributes
-
auth_value
9f49f23dce59b10ca387ae798166bfcc
Targets
-
- Target 351072e067f02a5afb3ffbf0fe94b92d
- Size 208KB
- SHA256 cef9886ef9f6d468fdddc6edb7f48c2a8dfbb7ebda56406f627b284f47038ddf
- MD5 351072e067f02a5afb3ffbf0fe94b92d
- SHA1 679e8d8d27584f139d4276cad494b8e839425a07
- SHA512 9d55b2c32fea2fd72519c7c1fdbe2419c9a4eef8283d904a54cdf5fe218f6b1ac9ee2b517262b4b07efcfc009654170126a3fc505a2649af5fc683799aa7dc00
- SSDEEP 3072:vg5Vw/aZA694eU05HxbWhsurIUvDVRtR2UP0tchUe/C+I4M:vgA/KRUiH90rIUbLach3id
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family