General
- Target 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
- Size 446KB
- Sample241110-ehhc3symcw
- SHA256 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
- MD5 b46f4f8038b9c99791b8bb27d7b4e73f
- SHA1 11ab8bb82e9c42210d95bcff08b453e0c158965b
- SHA512 affd7d93da8513a9c8636a697910ff1915aca02330e2d1545e414cdab67d84fb66e92f73a3158d61b71341486d1f330422b877aded1ebd7865aa4194daa4cad9
- SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
- Size 446KB
- SHA256 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
- MD5 b46f4f8038b9c99791b8bb27d7b4e73f
- SHA1 11ab8bb82e9c42210d95bcff08b453e0c158965b
- SHA512 affd7d93da8513a9c8636a697910ff1915aca02330e2d1545e414cdab67d84fb66e92f73a3158d61b71341486d1f330422b877aded1ebd7865aa4194daa4cad9
- SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family