General
- Target 9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b.exe
- Size 168KB
- Sample241113-ql79fssglr
- SHA256 9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b
- MD5 1d35e01fbb49f836c157af2ab46764d0
- SHA1 e9987ec70223dbf4eb94dcffab54e2b78870876f
- SHA512 dc334c4cb90b8b9ac9b173b37d4f49d9f76b2d617d0e97edf36d5df9c5fe60d01ea9764c1a9530234493291b8090e0a3586eaca6ecd878ef1eebfdfe843bb39b
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf1:jyOhyTI7YqV2KqZOjgAVUw8e8hf1
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b.exe
Resource
win7-20240903-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b.exe
Resource
win10v2004-20241007-en
4 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
diza
C2
-
77.91.124.145:4125
Attributes
-
auth_value
bbab0d2f0ae4d4fdd6b17077d93b3e80
Targets
-
- Target 9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b.exe
- Size 168KB
- SHA256 9f58313a1cdddfc78b73e6e2e59b7d1d95183272c161480dd14a8582e8e0512b
- MD5 1d35e01fbb49f836c157af2ab46764d0
- SHA1 e9987ec70223dbf4eb94dcffab54e2b78870876f
- SHA512 dc334c4cb90b8b9ac9b173b37d4f49d9f76b2d617d0e97edf36d5df9c5fe60d01ea9764c1a9530234493291b8090e0a3586eaca6ecd878ef1eebfdfe843bb39b
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf1:jyOhyTI7YqV2KqZOjgAVUw8e8hf1
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family