General
- Target 29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132.exe
- Size 168KB
- Sample241117-y64qrssmgk
- SHA256 29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132
- MD5 1995617b2ff6f7b3652db28e7e8ce2b4
- SHA1 c20a2a0b36d4dd466beedc9f6444d01b14ec4dbb
- SHA512 db0b6c511a0ad6cc15beee78405d029f3e6b04859cc666bef826e0677de8abe6686be78f91c68491d03e78c56f58fe7099a99306ca681bfa82acbc3e355bde8b
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hfV:jyOhyTI7YqV2KqZOjgAVUw8e8hfV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132.exe
Resource
win7-20241010-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132.exe
Resource
win10v2004-20241007-en
4 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
diza
C2
-
77.91.124.145:4125
Attributes
-
auth_value
bbab0d2f0ae4d4fdd6b17077d93b3e80
Targets
-
- Target 29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132.exe
- Size 168KB
- SHA256 29d583a81b785c6f850dda0ab97e962ff47a571a7f0789e7c0204f1875381132
- MD5 1995617b2ff6f7b3652db28e7e8ce2b4
- SHA1 c20a2a0b36d4dd466beedc9f6444d01b14ec4dbb
- SHA512 db0b6c511a0ad6cc15beee78405d029f3e6b04859cc666bef826e0677de8abe6686be78f91c68491d03e78c56f58fe7099a99306ca681bfa82acbc3e355bde8b
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hfV:jyOhyTI7YqV2KqZOjgAVUw8e8hfV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family