General
- Target 9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7N.exe
- Size 168KB
- Sample241118-h2adcswpfl
- SHA256 9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7
- MD5 de40afb1b0c2692d01b9edf66652f1f0
- SHA1 5fc01ae94eda9d50b411f703e3fbdebe87f51a43
- SHA512 33ae5c36d86a849afffb054eb824bc884e1dda05f0e3829a1d85d4ed07d93b0afe10a3c447d525b333d72d95fd89d84712956e3d2f02fe500ecc0847cb01bc2c
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7N.exe
Resource
win7-20240903-en
4 signatures
120 seconds
Behavioral task
behavioral2
Sample
9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7N.exe
Resource
win10v2004-20241007-en
4 signatures
120 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
diza
C2
-
77.91.124.145:4125
Attributes
-
auth_value
bbab0d2f0ae4d4fdd6b17077d93b3e80
Targets
-
- Target 9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7N.exe
- Size 168KB
- SHA256 9c89d81d67226219da315971ce2cdef3b1b214c120dcab9398c3889deac3b4f7
- MD5 de40afb1b0c2692d01b9edf66652f1f0
- SHA1 5fc01ae94eda9d50b411f703e3fbdebe87f51a43
- SHA512 33ae5c36d86a849afffb054eb824bc884e1dda05f0e3829a1d85d4ed07d93b0afe10a3c447d525b333d72d95fd89d84712956e3d2f02fe500ecc0847cb01bc2c
- SSDEEP 1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family