General
- Target 5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0
- Size 432KB
- Sample241110-e31edsyqe1
- SHA256 5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0
- MD5 5b762448f5bfd1bc3004b43cf445c912
- SHA1 9d08c34f188209c9201a983b45fb419b305236c4
- SHA512 9b766eb45ce386828dbb5b2c550682c93bde1ee44ce2d34edec3439e792e8da6783e7473d0f2d1d8fbc9be717b86eab002a9906830bc7de1529103e8365a675e
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0.exe
Resource
win7-20240729-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0
- Size 432KB
- SHA256 5b19796342131746abcf716283e261585871ca98dbcb1c83d609811419309df0
- MD5 5b762448f5bfd1bc3004b43cf445c912
- SHA1 9d08c34f188209c9201a983b45fb419b305236c4
- SHA512 9b766eb45ce386828dbb5b2c550682c93bde1ee44ce2d34edec3439e792e8da6783e7473d0f2d1d8fbc9be717b86eab002a9906830bc7de1529103e8365a675e
- SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family