General
- Target 00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739
- Size 394KB
- Sample241110-e2z28szekg
- SHA256 00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739
- MD5 8fe0948c7d4c3489731341d4cf9873bf
- SHA1 41f042b47be87aead2059671208e6ea02816ad72
- SHA512 00671c6b8f8e7554550d321a183710b17bafbcc09557b0fa1ee20e3707e8cfad5bab00c4f4ac5217288719567982e0b79e45a822876b86df5a50574503cd387c
- SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739
- Size 394KB
- SHA256 00458fc810c7fb9aea02ec951f8ec43ebf0d48bb8206e08f456398c636519739
- MD5 8fe0948c7d4c3489731341d4cf9873bf
- SHA1 41f042b47be87aead2059671208e6ea02816ad72
- SHA512 00671c6b8f8e7554550d321a183710b17bafbcc09557b0fa1ee20e3707e8cfad5bab00c4f4ac5217288719567982e0b79e45a822876b86df5a50574503cd387c
- SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family