General
- Target 0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db
- Size 434KB
- Sample241110-e6rlnayraz
- SHA256 0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db
- MD5 62afada4c5d6fe1c814cd013c2d64e43
- SHA1 75ade05b81673ecc73ecf68583e7a19cbf73cc2f
- SHA512 24d2b8ac046e192527d3254c08dae686b8e88ff4323ac8e73556fcccfcc78013e0b98a7ef25edd8a0acf477c0fad9138f9aa85f93b6e150924ccbcf94b6c9396
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db
- Size 434KB
- SHA256 0df89497ddbdec42078f50de1019eb151fc214b653153133655088df1a4891db
- MD5 62afada4c5d6fe1c814cd013c2d64e43
- SHA1 75ade05b81673ecc73ecf68583e7a19cbf73cc2f
- SHA512 24d2b8ac046e192527d3254c08dae686b8e88ff4323ac8e73556fcccfcc78013e0b98a7ef25edd8a0acf477c0fad9138f9aa85f93b6e150924ccbcf94b6c9396
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family