General
- Target a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473
- Size 272KB
- Sample241111-hmfltsyldp
- SHA256 a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473
- MD5 87954cb8e31cdc73a5eeb821af8f33e7
- SHA1 1f75b49d047cc08ff29216b2c7d3d6e60540c563
- SHA512 c0abceacdf823c4f5751a59c82aa730e6ce232b09a78049aaf727432752b06e3afe6852ee2dffa8ef00f8fc14a18d3cd3d829f06965fa4575ff9b7725ad0f456
- SSDEEP 3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ruma
C2
-
193.233.20.13:4136
Attributes
-
auth_value
647d00dfaba082a4a30f383bca5d1a2a
Targets
-
- Target a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473
- Size 272KB
- SHA256 a0649f2148445c9c5a904c666bc467668c39657d10a329f7dfb0592eed9c0473
- MD5 87954cb8e31cdc73a5eeb821af8f33e7
- SHA1 1f75b49d047cc08ff29216b2c7d3d6e60540c563
- SHA512 c0abceacdf823c4f5751a59c82aa730e6ce232b09a78049aaf727432752b06e3afe6852ee2dffa8ef00f8fc14a18d3cd3d829f06965fa4575ff9b7725ad0f456
- SSDEEP 3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family