General
- Target 080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8
- Size 433KB
- Sample241111-kmmq9awkaw
- SHA256 080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8
- MD5 b24d297f784e369fb44b18cee00cf373
- SHA1 53eeebff1e3d7835a44f0f1d560f271bd8309c62
- SHA512 605e5ff57e19100f88dc09bded7ddefb3b0685e25c0d7ac28b69ea7aff23d5f0f23bc35037b7df9ff850906434c8bc3167d93d081a5cdd3bfe7df85b41ae45f5
- SSDEEP 12288:A23qDw0q1u4suLA7OTxt05stpu9fobrhJuGHlA:ACqcpZJLA762evuihb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
asia
C2
-
45.9.20.240:46257
Attributes
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
- Target 080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8
- Size 433KB
- SHA256 080e863d13228b029e6c6d34a5b98cbb473df1ac8f4beed8005277deb4a912b8
- MD5 b24d297f784e369fb44b18cee00cf373
- SHA1 53eeebff1e3d7835a44f0f1d560f271bd8309c62
- SHA512 605e5ff57e19100f88dc09bded7ddefb3b0685e25c0d7ac28b69ea7aff23d5f0f23bc35037b7df9ff850906434c8bc3167d93d081a5cdd3bfe7df85b41ae45f5
- SSDEEP 12288:A23qDw0q1u4suLA7OTxt05stpu9fobrhJuGHlA:ACqcpZJLA762evuihb
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family