General
- Target 257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82
- Size 434KB
- Sample241111-chfhdazhpc
- SHA256 257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82
- MD5 07a06a03ad16e0e3063320f14a9a40d0
- SHA1 472c2f5ff9f42c1c966c00a2e57d5ebbc672fdda
- SHA512 3f8dad1bbfb94275965ea7ef33f3a3a80235cfd8a50ed3252e6634a4d3eed14e6c15f47cf68e31d75a35487769fa00538e15c8ce5cda543efefee582b4e808d0
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82
- Size 434KB
- SHA256 257379676470cace75aa5ebc11ec3f5e0a209f2e6782e308930c87173aad8d82
- MD5 07a06a03ad16e0e3063320f14a9a40d0
- SHA1 472c2f5ff9f42c1c966c00a2e57d5ebbc672fdda
- SHA512 3f8dad1bbfb94275965ea7ef33f3a3a80235cfd8a50ed3252e6634a4d3eed14e6c15f47cf68e31d75a35487769fa00538e15c8ce5cda543efefee582b4e808d0
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family