General
- Target f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68
- Size 175KB
- Sample241116-k97d6stdne
- SHA256 f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68
- MD5 e1ea1803729c40ed006ec6a74a276e62
- SHA1 46d1405f3b604b09975af5fa72b6de8d47186d67
- SHA512 f34cf874e78935006c8313beaa2db6875dad919fd5b94f009468a2e2f8e8a9d7be8d924093987674978829f507da140d25ce11859961fc1ac219de2bc8a1b914
- SSDEEP 3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68.exe
Resource
win7-20241023-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
dunkan
C2
-
193.233.20.24:4123
Attributes
-
auth_value
505c396c57c6287fc3fdc5f3aeab0819
Targets
-
- Target f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68
- Size 175KB
- SHA256 f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68
- MD5 e1ea1803729c40ed006ec6a74a276e62
- SHA1 46d1405f3b604b09975af5fa72b6de8d47186d67
- SHA512 f34cf874e78935006c8313beaa2db6875dad919fd5b94f009468a2e2f8e8a9d7be8d924093987674978829f507da140d25ce11859961fc1ac219de2bc8a1b914
- SSDEEP 3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family