General
- Target 9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7
- Size 319KB
- Sample241111-lbdvms1jfl
- SHA256 9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7
- MD5 f94e7a3d857d0276513d41b070604c72
- SHA1 4f247b29e70baa7932be0d59e22acc950cace1a8
- SHA512 64750e2f849b7f43a1d4fe47561b46ef86db7e904d7b024f7e0a9308c5f1920e7a92532f1fca829c846c203669b260da8e7a3ef40e274a4135cc4c413d47a649
- SSDEEP 6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7.exe
Resource
win7-20241023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
123
C2
-
78.153.144.3:2510
Attributes
-
auth_value
cd6abb0af211bce081d7bf127cc26835
Targets
-
- Target 9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7
- Size 319KB
- SHA256 9cad58a142863cb0b81cf6d49331200937bc5e92811797098ff94d6421eee7c7
- MD5 f94e7a3d857d0276513d41b070604c72
- SHA1 4f247b29e70baa7932be0d59e22acc950cace1a8
- SHA512 64750e2f849b7f43a1d4fe47561b46ef86db7e904d7b024f7e0a9308c5f1920e7a92532f1fca829c846c203669b260da8e7a3ef40e274a4135cc4c413d47a649
- SSDEEP 6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family