General
- Target 38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2
- Size 364KB
- Sample241110-m5ppnsvgrp
- SHA256 38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2
- MD5 4791eea8e85ff04167a081c7ca85ed7e
- SHA1 96e70760ba86f3592cb5db62d5532f647db11d73
- SHA512 619d8d98655fd3dc880ab9f275371ad02b0ea33098572969db3bcf41a2f068b1140c46bdcf34c41e5ce6979e0c990d3c73653e9fe0e09b4049c9186bea03d270
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2.exe
Resource
win7-20240903-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2
- Size 364KB
- SHA256 38d7c2e5021d3c0d981e7f414fa62bca7407cf14415d07181af0910459bba2b2
- MD5 4791eea8e85ff04167a081c7ca85ed7e
- SHA1 96e70760ba86f3592cb5db62d5532f647db11d73
- SHA512 619d8d98655fd3dc880ab9f275371ad02b0ea33098572969db3bcf41a2f068b1140c46bdcf34c41e5ce6979e0c990d3c73653e9fe0e09b4049c9186bea03d270
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family