General
- Target 49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00
- Size 447KB
- Sample241111-dtx28ssbmb
- SHA256 49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00
- MD5 812e7dc72a09b75738ad7fd92a4017c7
- SHA1 e330f7763ce551b5441ea3f99bcd95d0eb17a90d
- SHA512 efaaf485fbceff8e663092d0c7ed0b87ea8ebd88378572cbfff939199db57efbed00e73490e0df01090b8133b437ae842f991e66e08753d73bf09221e5f85490
- SSDEEP 6144:/XO7VIXtU2yzAv0SzT2pXsjPTA5zZUylECTi1zLKS2ri8Tq7Cq/O:8VIXtLyzA8SeyPTqZUylhG1zLYm8TyO
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00.exe
Resource
win7-20241010-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00
- Size 447KB
- SHA256 49cf9c0b98db5c56509e065a54b9792588a83df6d598737b59715a280172cd00
- MD5 812e7dc72a09b75738ad7fd92a4017c7
- SHA1 e330f7763ce551b5441ea3f99bcd95d0eb17a90d
- SHA512 efaaf485fbceff8e663092d0c7ed0b87ea8ebd88378572cbfff939199db57efbed00e73490e0df01090b8133b437ae842f991e66e08753d73bf09221e5f85490
- SSDEEP 6144:/XO7VIXtU2yzAv0SzT2pXsjPTA5zZUylECTi1zLKS2ri8Tq7Cq/O:8VIXtLyzA8SeyPTqZUylhG1zLYm8TyO
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family