General
- Target e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb.bin
- Size 350KB
- Sample260801-nd7lvatdmc
- SHA256 e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb
- MD5 553930a8a8a90c60ceff8714dab0d6f0
- SHA1 0c2a1659ff642ad8df31887e69387164b08d87e9
- SHA512 cfdbc2ac1047e7fbf42c28eb733b9c9dbfe1086bdb6776bba07ed0d9b9789198370e85600d38aa8b693396ec0f21c36dc67634dc2ddaccc27b45aaf80ad1caa6
- SSDEEP 3072:Qn8CqjwLYhlYYgafJlnLXn8CqjwLYhlYYgafJln:y4j1Vd4j1V
- TLSH T1D5747EA173DE9D64F97D0B759876022947B4EA0A6813E38F3CC830D52F63B4167293A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@Germany
C2
-
194.26.135.162:2920
Attributes
-
auth_value
9d15d78194367a949e54a07d6ce02c62
Targets
-
- Target e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb.bin
- Size 350KB
- SHA256 e1a0cc05b7aea949d70ae034b12f984c3c4b36a952c46e22d9dcde4d58fb30eb
- MD5 553930a8a8a90c60ceff8714dab0d6f0
- SHA1 0c2a1659ff642ad8df31887e69387164b08d87e9
- SHA512 cfdbc2ac1047e7fbf42c28eb733b9c9dbfe1086bdb6776bba07ed0d9b9789198370e85600d38aa8b693396ec0f21c36dc67634dc2ddaccc27b45aaf80ad1caa6
- SSDEEP 3072:Qn8CqjwLYhlYYgafJlnLXn8CqjwLYhlYYgafJln:y4j1Vd4j1V
- TLSH T1D5747EA173DE9D64F97D0B759876022947B4EA0A6813E38F3CC830D52F63B4167293A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload