General
- Target df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c
- Size 302KB
- Sample241111-gdahsavaqf
- SHA256 df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c
- MD5 996ee196834fd5ef7761001c052207cd
- SHA1 7a17e288c30b332de3b63b2c1c915faa0b2cc3c0
- SHA512 11e19edc35b16e83cb16a25f31f5eefd999a201568866e8ceefbe1973fff83bb28fb2e37068d5d84dfed9baa3cd41efee238f45ce6fcdbe7dccce31005dff237
- SSDEEP 3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c.exe
Resource
win7-20241010-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
11
C2
-
45.9.20.157:46257
Attributes
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
- Target df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c
- Size 302KB
- SHA256 df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c
- MD5 996ee196834fd5ef7761001c052207cd
- SHA1 7a17e288c30b332de3b63b2c1c915faa0b2cc3c0
- SHA512 11e19edc35b16e83cb16a25f31f5eefd999a201568866e8ceefbe1973fff83bb28fb2e37068d5d84dfed9baa3cd41efee238f45ce6fcdbe7dccce31005dff237
- SSDEEP 3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family