General
- Target c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1
- Size 434KB
- Sample241111-dq8dssvmgl
- SHA256 c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1
- MD5 ddf0d34faf70c25c71fae1653e8326f1
- SHA1 ee4555a40097462e84306da934c8b42a445d19a4
- SHA512 2e32fb3642abe68a39790a125134b5be9b0fc7f0f506f634e679c8318fc758059d11a36967263cf686d5d58c681c224039ee1556cd05823d7d9f756692fb2b6e
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1.exe
Resource
win7-20240729-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1
- Size 434KB
- SHA256 c8c2b4ebe6b952bf85c0d5b9bf18ba7f7c1859ffe3dc4825194a406cfccac5c1
- MD5 ddf0d34faf70c25c71fae1653e8326f1
- SHA1 ee4555a40097462e84306da934c8b42a445d19a4
- SHA512 2e32fb3642abe68a39790a125134b5be9b0fc7f0f506f634e679c8318fc758059d11a36967263cf686d5d58c681c224039ee1556cd05823d7d9f756692fb2b6e
- SSDEEP 6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family