General
- Target 164eae7a290ed03748d1c4b3128de0294dc7e061
- Size 363KB
- Sample241111-hknjnavdrn
- SHA256 8490559452a2f6bc686793df5147517e703a4f324a7e1a580b9336b90b9ce939
- MD5 a153636a6b7866ae758304c5e23b39df
- SHA1 164eae7a290ed03748d1c4b3128de0294dc7e061
- SHA512 8d82718999bbe174ee7f95d36559c3836242af245b98f4e4092eb99476a309e10b573671965975a8d1bae5123c35fbe5df66a43192ae9bd0921b08f94802f343
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
164eae7a290ed03748d1c4b3128de0294dc7e061.exe
Resource
win7-20241010-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
164eae7a290ed03748d1c4b3128de0294dc7e061.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target 164eae7a290ed03748d1c4b3128de0294dc7e061
- Size 363KB
- SHA256 8490559452a2f6bc686793df5147517e703a4f324a7e1a580b9336b90b9ce939
- MD5 a153636a6b7866ae758304c5e23b39df
- SHA1 164eae7a290ed03748d1c4b3128de0294dc7e061
- SHA512 8d82718999bbe174ee7f95d36559c3836242af245b98f4e4092eb99476a309e10b573671965975a8d1bae5123c35fbe5df66a43192ae9bd0921b08f94802f343
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family