General
- Target 2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf
- Size 361KB
- Sample241111-grt5catld1
- SHA256 2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf
- MD5 b53ac40a9909859397486caf77e7f404
- SHA1 b64536cb8b3bfd0b626d517ef77a969fd00adbac
- SHA512 71e6aee03f67a6514585fd126b21e7f990fae01518e2e7129314b603081fe1e2209eea8a6cca7ddaaf617b8f58cf8507bc3232a61c810c18329e1684a7927122
- SSDEEP 6144:nP5lRPv2iqc3WM2xBUOzDuFl1m0J0fu9XR+Y4BO2JHUg7b/EDN/:P5/eiqc3WMrMDqqfS1eJJpkDh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf.exe
Resource
win7-20241010-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target 2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf
- Size 361KB
- SHA256 2318e8dbc85950fbb36c05dde64f9858d6781efff69d133c7380d78603429ecf
- MD5 b53ac40a9909859397486caf77e7f404
- SHA1 b64536cb8b3bfd0b626d517ef77a969fd00adbac
- SHA512 71e6aee03f67a6514585fd126b21e7f990fae01518e2e7129314b603081fe1e2209eea8a6cca7ddaaf617b8f58cf8507bc3232a61c810c18329e1684a7927122
- SSDEEP 6144:nP5lRPv2iqc3WM2xBUOzDuFl1m0J0fu9XR+Y4BO2JHUg7b/EDN/:P5/eiqc3WMrMDqqfS1eJJpkDh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family