General
- Target 3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5.bin
- Size 138KB
- Sample260813-qjppbsbb95
- SHA256 3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5
- MD5 36b1ae32900a7fefcbb7596ca17c1315
- SHA1 5f28d01acd134728ac3c48c57316b6a9a523aedf
- SHA512 938c3af9417a47c934004aef14c7234b2a4c4f50e61eb85f8a1126efb7a37443b4636ba233cbfa5f12da246513b4e4c6a105bec1605c8655e6e1247e657fec7b
- SSDEEP 3072:b5RqvaRy1V8SOzsxeQhXEpbxSFbGgKTZ:bfqvak8xzCeQhXEnmbGgK
- TLSH T138D3292467ACCB39E77E4B75B4F0112447B0908F6501EBAE4DC474D97A1AB806227FFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
SEOFIX2
C2
-
utlmy.xyz:80
-
zahalode.xyz:80
Targets
-
- Target 3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5.bin
- Size 138KB
- SHA256 3c1bbf32ca82d8fb29418132d48111f6f1492900930eabd000ceb877ff753fe5
- MD5 36b1ae32900a7fefcbb7596ca17c1315
- SHA1 5f28d01acd134728ac3c48c57316b6a9a523aedf
- SHA512 938c3af9417a47c934004aef14c7234b2a4c4f50e61eb85f8a1126efb7a37443b4636ba233cbfa5f12da246513b4e4c6a105bec1605c8655e6e1247e657fec7b
- SSDEEP 3072:b5RqvaRy1V8SOzsxeQhXEpbxSFbGgKTZ:bfqvak8xzCeQhXEnmbGgK
- TLSH T138D3292467ACCB39E77E4B75B4F0112447B0908F6501EBAE4DC474D97A1AB806227FFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload