General
- Target ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65
- Size 364KB
- Sample241111-k4e3qsxdqe
- SHA256 ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65
- MD5 5e8f56ce593aca7b2960a153a102f9e5
- SHA1 4e887608c8d31c5a089505e13e22cac7c6a4c598
- SHA512 cedc9ecc0137c9e06e1c21db7db80e1202fe9a6bf8f338e149d1f8babae330a5d1532c566677c11b124393ae1a7c76cee7decc23a6a2df2dfe2f3121a8e59bc2
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65.exe
Resource
win7-20240729-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0002
C2
-
13.72.81.58:13413
Attributes
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
- Target ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65
- Size 364KB
- SHA256 ced22f92f8cebf5f7673863e166595ee13789e6176bcf9ad129979c5c9183b65
- MD5 5e8f56ce593aca7b2960a153a102f9e5
- SHA1 4e887608c8d31c5a089505e13e22cac7c6a4c598
- SHA512 cedc9ecc0137c9e06e1c21db7db80e1202fe9a6bf8f338e149d1f8babae330a5d1532c566677c11b124393ae1a7c76cee7decc23a6a2df2dfe2f3121a8e59bc2
- SSDEEP 6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family