General
- Target 3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1.exe
- Size 175KB
- Sample241113-sdjl8stfrc
- SHA256 3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1
- MD5 464b70e999991a4459e323dd1f011337
- SHA1 d6b9fc0ca5858787ce7ae4ce222185f75cd5c871
- SHA512 a9ab644e3d5fd01b65f49309d4a7057b06e2a79b161d4f08301a1407d613ce9acc3de5c0327652cda759e9d3839886affe5643db645391f59f36ce44fbf988b9
- SSDEEP 3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOi:gqZcmWkUM+hA
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1.exe
Resource
win7-20240903-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1.exe
Resource
win10v2004-20241007-en
4 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
fomich
C2
-
melevv.eu:4162
Attributes
-
auth_value
b018e52ac946001794d8b8c23e901859
Targets
-
- Target 3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1.exe
- Size 175KB
- SHA256 3ebbf1f231ea54fe4b318c07c5e4a73cb8fdc69cd8ad8bee145281f71dc418a1
- MD5 464b70e999991a4459e323dd1f011337
- SHA1 d6b9fc0ca5858787ce7ae4ce222185f75cd5c871
- SHA512 a9ab644e3d5fd01b65f49309d4a7057b06e2a79b161d4f08301a1407d613ce9acc3de5c0327652cda759e9d3839886affe5643db645391f59f36ce44fbf988b9
- SSDEEP 3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOi:gqZcmWkUM+hA
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family