General
- Target 959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c
- Size 434KB
- Sample241110-gmda2a1end
- SHA256 959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c
- MD5 489b527bc460b43964c676c9206518fe
- SHA1 87595daea8b308dbced173f4bcf83db3827415c1
- SHA512 471b4a5d32e2f0fd4081cd2b4d73f3bb7fbec097b1ddcee8a3bc90be95c2ef0f1e8b5bbcb30f874c2bfd31c8e3e65d24a5e47aca4b8cef9811b100453cefc797
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c.exe
Resource
win7-20240729-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c
- Size 434KB
- SHA256 959f15b8e35ee2a239152e0d9693e58b7af63390c8a56c774711fd4532a8572c
- MD5 489b527bc460b43964c676c9206518fe
- SHA1 87595daea8b308dbced173f4bcf83db3827415c1
- SHA512 471b4a5d32e2f0fd4081cd2b4d73f3bb7fbec097b1ddcee8a3bc90be95c2ef0f1e8b5bbcb30f874c2bfd31c8e3e65d24a5e47aca4b8cef9811b100453cefc797
- SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family