General
- Target build.exe
- Size 300KB
- Sample251015-e3hjkswygx
- SHA256 09932c54ae6cb9a4381bb4332ce9fbf0ef1c15dff46bbde0b264950e9e1b3e0b
- MD5 8be37bf669989778a1091d58bfc3c14f
- SHA1 9b346fcc6ce78da3a190f0d2490e3f2cf843c208
- SHA512 f6d545bbd647b7fc0a3076b1a94d829bd31b03edefdb7bda81dddd7bde64897d956ed42332c5a7c45246f02fb6739f21d18d710dc71b8ceab8ce4569c665f17d
- SSDEEP 3072:ecZqf7D34ip/0+mAKky4iSQIgl+B1fA0PuTVAtkxzv3RweqiOL2bBOA:ecZqf7DISnSR8B1fA0GTV8k1QL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
build.exe
Resource
win10v2004-20250619-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
build.exe
Resource
win11-20250610-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
moi
C2
-
address-buffer.gl.at.ply.gg:5047
Targets
-
- Target build.exe
- Size 300KB
- SHA256 09932c54ae6cb9a4381bb4332ce9fbf0ef1c15dff46bbde0b264950e9e1b3e0b
- MD5 8be37bf669989778a1091d58bfc3c14f
- SHA1 9b346fcc6ce78da3a190f0d2490e3f2cf843c208
- SHA512 f6d545bbd647b7fc0a3076b1a94d829bd31b03edefdb7bda81dddd7bde64897d956ed42332c5a7c45246f02fb6739f21d18d710dc71b8ceab8ce4569c665f17d
- SSDEEP 3072:ecZqf7D34ip/0+mAKky4iSQIgl+B1fA0PuTVAtkxzv3RweqiOL2bBOA:ecZqf7DISnSR8B1fA0GTV8k1QL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family