General
- Target 2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d.bin
- Size 204KB
- Sample260913-ndkr3swdke
- SHA256 2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d
- MD5 d71749995f1d2e10452adebab07fe26d
- SHA1 21d8664848dd0f6eaebce534d6c0021c56e99fe9
- SHA512 be1c6f90cf2355740e7242fafeb99dda2831b312776576b51e7a72307438d8303eb412721e38712df77579f23bb2002341f0ed4942a7747b06d7a2ab4ba93c38
- SSDEEP 3072:4DKW1LgppLRHMYTTBfJvjcTp5X7mULufphs2/:4DKW1LgbdlTTBBvjc/7Fah
- TLSH T10B24BF2171D1C1B3C4BA113444E5CB7A9B7A3071076A96D7B6DD2BBA6F203E1A3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
MY
C2
-
93.115.18.245:35200
Targets
-
- Target 2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d.bin
- Size 204KB
- SHA256 2b1b5bbea0d3bca9f1f890f16101ae7451c7e3750131fe223d4999f9a6d9724d
- MD5 d71749995f1d2e10452adebab07fe26d
- SHA1 21d8664848dd0f6eaebce534d6c0021c56e99fe9
- SHA512 be1c6f90cf2355740e7242fafeb99dda2831b312776576b51e7a72307438d8303eb412721e38712df77579f23bb2002341f0ed4942a7747b06d7a2ab4ba93c38
- SSDEEP 3072:4DKW1LgppLRHMYTTBfJvjcTp5X7mULufphs2/:4DKW1LgbdlTTBBvjc/7Fah
- TLSH T10B24BF2171D1C1B3C4BA113444E5CB7A9B7A3071076A96D7B6DD2BBA6F203E1A3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload