General
- Target usdt flash sender 2.exe
- Size 912KB
- Sample250723-vxbrvaythy
- SHA256 a52ee89e6dcfda0175f9dca3fadbba5ca881e590aab6e3f2e2122c7897633245
- MD5 253ae1c7fb30eff31bf7b066c76bd709
- SHA1 a94051d962083ecb0c2d0b5593d065b26b50802f
- SHA512 fd4263a0a3e4a10d723251b23fac6296f906e4e6fcb55b0c8ef2d7683724f014e90e35bd9fb0d875c3393eb3f72f205a6e0cd9d98d211910173d4489d3db4b63
- SSDEEP 12288:MzxzTDWikLSb4NS79EmpJWSbeZHXOH7VRVoq4mjleKvavmGfVettLyxXnrsObATx:KDWHSb4NPeWSbeZ0B1460fA8VrhATx
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
usdt flash sender 2.exe
Resource
win11-20250619-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
usdt-flash 2.0
C2
-
109.248.201.180:7500
Targets
-
- Target usdt flash sender 2.exe
- Size 912KB
- SHA256 a52ee89e6dcfda0175f9dca3fadbba5ca881e590aab6e3f2e2122c7897633245
- MD5 253ae1c7fb30eff31bf7b066c76bd709
- SHA1 a94051d962083ecb0c2d0b5593d065b26b50802f
- SHA512 fd4263a0a3e4a10d723251b23fac6296f906e4e6fcb55b0c8ef2d7683724f014e90e35bd9fb0d875c3393eb3f72f205a6e0cd9d98d211910173d4489d3db4b63
- SSDEEP 12288:MzxzTDWikLSb4NS79EmpJWSbeZHXOH7VRVoq4mjleKvavmGfVettLyxXnrsObATx:KDWHSb4NPeWSbeZ0B1460fA8VrhATx
- MD5 SHA1 SHA512 SSDEEP
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family
Executes dropped EXE
Suspicious use of SetThreadContext