General
- Target 40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28.exe
- Size 295KB
- Sample241111-k7vmlaxeld
- SHA256 40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28
- MD5 9dbf1154a019965c6f964021b3c1ce4d
- SHA1 81192d2e020b5044e64f8ad0675f34854b2227e0
- SHA512 06cd600274e1e880b3eed0a7d1ae2f1a1f8a5419e76f99a4b264ae9faa62b4418a4474ef19f9f1e87f9957973a333b0d6fc0754a0d2eea272a56e16bf070916b
- SSDEEP 6144:sqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08np:JhUt5cQrw+GhCIJ0ft/juI8p
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28.exe
Resource
win7-20240903-en
5 signatures
120 seconds
Behavioral task
behavioral2
Sample
40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28.exe
Resource
win10v2004-20241007-en
5 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
rosn
C2
-
176.113.115.145:4125
Attributes
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
- Target 40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28.exe
- Size 295KB
- SHA256 40f8769114345d113a8323d62e78c9758419de27fc04cd7441f1dacf759e0e28
- MD5 9dbf1154a019965c6f964021b3c1ce4d
- SHA1 81192d2e020b5044e64f8ad0675f34854b2227e0
- SHA512 06cd600274e1e880b3eed0a7d1ae2f1a1f8a5419e76f99a4b264ae9faa62b4418a4474ef19f9f1e87f9957973a333b0d6fc0754a0d2eea272a56e16bf070916b
- SSDEEP 6144:sqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08np:JhUt5cQrw+GhCIJ0ft/juI8p
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family