General
- Target 41bcd98799526ceb0078ec383aab30ba9f506f6a
- Size 295KB
- Sample241111-bpl33asmhq
- SHA256 f0d8f94dc9ca1db21da3ef8c9c9b22b7fc2f095c95c9d1bc7e5c5cc515d721c7
- MD5 25e8629a642217d13c8c0bd3847a0883
- SHA1 41bcd98799526ceb0078ec383aab30ba9f506f6a
- SHA512 12ea482d77278d4ddd54dd91f1df5ff31c8edc3eaa3e5e7c1568d75dd43b5cd54648d922f1600b6fc77070d01e797ec32304df64dc61bd3261ec8bed655e234c
- SSDEEP 6144:mQZ9XwymZsGo95WGomGUghUBWdkFr70OTDJtm7Jyp5kK90A:mSAjo9cmGIBWOFrRTDz8yp+K9T
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
de7964f776b4a97b2260834e1c24886bbfd715700598414b09212b1782985aa6.exe
Resource
win7-20241010-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
de7964f776b4a97b2260834e1c24886bbfd715700598414b09212b1782985aa6.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dozkey
C2
-
193.106.191.24:47242
Attributes
-
auth_value
6386fb6f33ca338f864abfc5f8fe1774
Targets
-
- Target de7964f776b4a97b2260834e1c24886bbfd715700598414b09212b1782985aa6.exe
- Size 470KB
- SHA256 de7964f776b4a97b2260834e1c24886bbfd715700598414b09212b1782985aa6
- MD5 9eeb516f7553fe64c0742866409e5e09
- SHA1 34e784ff89414e20d7782f34a982a926f27384ac
- SHA512 b5b3243b00cd1c7dde43390320cac15a7a2f887aee37ee6d27b2f4c3a73ac691571e43d776ec29b2ba9bf976bd07af022792ddd2154817bd4b0b3bcf324375d2
- SSDEEP 6144:6nyB+FovLbZeEVn6uQLDyEyiL9hByK+HbmtVVKSQYZL7ITsq/:6nDyvLbAEI5LEkzVybaVKSQQ7
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family