General
- Target ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651
- Size 434KB
- Sample241110-elwpwazblb
- SHA256 ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651
- MD5 4c56976202ad25f66a10b24c420531c5
- SHA1 3a90036751a0b36e07ffce35269e2e44847540d6
- SHA512 ecb7c6c108e22531db7e73894fc38aafb60faa946e2d8a7c955b456b768801c864df684eaac4489789dd7f067971ad2da313de70b5a82981c713708c2dce4a45
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651
- Size 434KB
- SHA256 ea89f8a222d7bf820c929a3926b370d098dd86002b0d51114bf38c2aeb94b651
- MD5 4c56976202ad25f66a10b24c420531c5
- SHA1 3a90036751a0b36e07ffce35269e2e44847540d6
- SHA512 ecb7c6c108e22531db7e73894fc38aafb60faa946e2d8a7c955b456b768801c864df684eaac4489789dd7f067971ad2da313de70b5a82981c713708c2dce4a45
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family