General
- Target d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
- Size 423KB
- Sample241111-hfcllavdkj
- SHA256 d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
- MD5 c188b6f337be203702a9c8f8c4a9fdf3
- SHA1 24fcfd07b3523983a37ec0686a0ecba8c955e59e
- SHA512 a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623
- SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
1
C2
-
45.9.20.59:46287
Attributes
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
- Target d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
- Size 423KB
- SHA256 d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
- MD5 c188b6f337be203702a9c8f8c4a9fdf3
- SHA1 24fcfd07b3523983a37ec0686a0ecba8c955e59e
- SHA512 a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623
- SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family