General
- Target 6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac
- Size 394KB
- Sample241111-b2cedszbjn
- SHA256 6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac
- MD5 1819b8d23f68d19f57386e90f89a29d6
- SHA1 3aabb6b2cc097de9ff7d26cdfc7caa6ed9c1c148
- SHA512 bcff18310ca1c1706bf78e0e9f295c6d6b7c16b6c65516a03913babb58e41d45830e057d8d4c00ec70407b7eff7db247519ca6f53bcd3968c0c403869bb2f854
- SSDEEP 6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac
- Size 394KB
- SHA256 6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac
- MD5 1819b8d23f68d19f57386e90f89a29d6
- SHA1 3aabb6b2cc097de9ff7d26cdfc7caa6ed9c1c148
- SHA512 bcff18310ca1c1706bf78e0e9f295c6d6b7c16b6c65516a03913babb58e41d45830e057d8d4c00ec70407b7eff7db247519ca6f53bcd3968c0c403869bb2f854
- SSDEEP 6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family