General
- Target 597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef
- Size 293KB
- Sample241111-fa4f1sslgv
- SHA256 597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef
- MD5 f204d79fae58bcea4a5ceae0be15f7d5
- SHA1 222a5de0d6556047041d1bdb940b09f484619cb4
- SHA512 61c7adcef1db425fa9d35a6770c1d38aa1fda4c222ea4bc917abf5aff3574ea423bce8bafd170274b7fc32388751e81fbd4995db6d3def018170c21efd05ea91
- SSDEEP 6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.168:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef
- Size 293KB
- SHA256 597338a11aabde3c1f61f45938d52ba615edfaa0174fb81442e112c0e68718ef
- MD5 f204d79fae58bcea4a5ceae0be15f7d5
- SHA1 222a5de0d6556047041d1bdb940b09f484619cb4
- SHA512 61c7adcef1db425fa9d35a6770c1d38aa1fda4c222ea4bc917abf5aff3574ea423bce8bafd170274b7fc32388751e81fbd4995db6d3def018170c21efd05ea91
- SSDEEP 6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family