General
- Target d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453dN
- Size 168KB
- Sample241113-npy4va1dkc
- SHA256 d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453d
- MD5 1cf5851bf16df782bfa3ef4163651560
- SHA1 7404f4139d0391955d0714d2ad4c14d1bf50a700
- SHA512 9284754aa3de23bb73b3298856bdacd54fed7f7951f50594f63fdac3cc4abff8aa6026c18532c5a0f5ae49da59799de81126c08dfe8f63f5978acbb0caa3a0eb
- SSDEEP 1536:2N+pfrkqlVZRGWPbrrVqmxPZbrsU0WSGGGGGGGGGGGGGGGGGtECK8TGqVGbunTeK:2N+pT99xRUxFqVSTYkNpD8e8hl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453dN.exe
Resource
win7-20240903-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453dN.exe
Resource
win10v2004-20241007-en
4 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
maxud
C2
-
217.196.96.101:4132
Attributes
-
auth_value
f1403d964c52b6641ba1ef14803e6e74
Targets
-
- Target d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453dN
- Size 168KB
- SHA256 d35c8b36e36d14ab9017d4ad003639270aff3c830ec684a4704707425562453d
- MD5 1cf5851bf16df782bfa3ef4163651560
- SHA1 7404f4139d0391955d0714d2ad4c14d1bf50a700
- SHA512 9284754aa3de23bb73b3298856bdacd54fed7f7951f50594f63fdac3cc4abff8aa6026c18532c5a0f5ae49da59799de81126c08dfe8f63f5978acbb0caa3a0eb
- SSDEEP 1536:2N+pfrkqlVZRGWPbrrVqmxPZbrsU0WSGGGGGGGGGGGGGGGGGtECK8TGqVGbunTeK:2N+pT99xRUxFqVSTYkNpD8e8hl
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family