General
- Target 19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a
- Size 364KB
- Sample241111-d1b4cascng
- SHA256 19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a
- MD5 2d1ffa6753a8093e5dc5db8539b888a4
- SHA1 0855b0dd2a24eff1951dc1586e1a42f860c1c0f0
- SHA512 2d5d0cabdb1936975ff98ae0e2efe5b44975400659ab31adaf263a0d2372d7c9d362292a2aa935b1f11fbc249aadae8c26ee70dcc6e3438881d2afe40a6d015e
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a.exe
Resource
win7-20240903-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a
- Size 364KB
- SHA256 19d6ddc10a549648294a736be3b08afb025bb56ec4813015bbec119ad74b1a7a
- MD5 2d1ffa6753a8093e5dc5db8539b888a4
- SHA1 0855b0dd2a24eff1951dc1586e1a42f860c1c0f0
- SHA512 2d5d0cabdb1936975ff98ae0e2efe5b44975400659ab31adaf263a0d2372d7c9d362292a2aa935b1f11fbc249aadae8c26ee70dcc6e3438881d2afe40a6d015e
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family