General
- Target 276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2.bin
- Size 144KB
- Sample260802-xzgf8azflb
- SHA256 276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2
- MD5 fcd7e763390adb990d2919996a19d7fb
- SHA1 2d1f735281c7e6779f5f695b1620d703e394b10e
- SHA512 653ceeb9e9c66b0b3d954037006f3d45c82a54daaa3240c80243c5b6a90d7f8fe859200897334120fcb61ea2fb2a4f44a07bdc4e40d187cad879b068feee004d
- SSDEEP 1536:K+qctdmaGi05/n9r8WA3pl38YRvq+L5+bYvv1Vw69JsYgibfbFDKsREV:KM4wfsYRvbLYsBAYgafJlEV
- TLSH T1F1E35D9473DE8D65F97C0B70A4B602194774EA0A7423E74F3CCD30DA6E63B4067297A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@PRIVATE
C2
-
185.81.68.115:2920
Attributes
-
auth_value
1d79e0e64c9e89a46d43760189292e5d
Targets
-
- Target 276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2.bin
- Size 144KB
- SHA256 276553212f45a748c42bedcfc99445b658da8c52ca120b985f1393c5ec98f7d2
- MD5 fcd7e763390adb990d2919996a19d7fb
- SHA1 2d1f735281c7e6779f5f695b1620d703e394b10e
- SHA512 653ceeb9e9c66b0b3d954037006f3d45c82a54daaa3240c80243c5b6a90d7f8fe859200897334120fcb61ea2fb2a4f44a07bdc4e40d187cad879b068feee004d
- SSDEEP 1536:K+qctdmaGi05/n9r8WA3pl38YRvq+L5+bYvv1Vw69JsYgibfbFDKsREV:KM4wfsYRvbLYsBAYgafJlEV
- TLSH T1F1E35D9473DE8D65F97C0B70A4B602194774EA0A7423E74F3CCD30DA6E63B4067297A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload