General
- Target b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57
- Size 422KB
- Sample241111-laytesxcjm
- SHA256 b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57
- MD5 e402f8e94127e21c4a2b78b7c959a423
- SHA1 0adf21961adb6395463957762bfbf5a6f675b1a0
- SHA512 f67a2ad1195594bc882326deab5bff1a4415191e7b1b7f48427cd4016737e18621ee0e702f1c3761cc73ca0fc998479b5e98145ea6441934c10e9af0e573e233
- SSDEEP 12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
1
C2
-
45.9.20.59:46287
Attributes
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
- Target b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57
- Size 422KB
- SHA256 b262a0b776c08a3f07da9e663d9758e66a7fd3fb1a26591cbc40ec98de28bf57
- MD5 e402f8e94127e21c4a2b78b7c959a423
- SHA1 0adf21961adb6395463957762bfbf5a6f675b1a0
- SHA512 f67a2ad1195594bc882326deab5bff1a4415191e7b1b7f48427cd4016737e18621ee0e702f1c3761cc73ca0fc998479b5e98145ea6441934c10e9af0e573e233
- SSDEEP 12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family