General
- Target f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd.exe
- Size 321KB
- Sample261019-j2bf4afs5n
- SHA256 f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd
- MD5 b28942080b8a748312a3fe374916ad79
- SHA1 fbd0bd60739a79944400feba0693747c908a4540
- SHA512 8dbd6f90edd978431c5eb609d34f8817c2277bba912eedbdc39e92c2282bb958ca1441d0a9917fc1cf4099b7e58dc9bf52ef96e842461c5c50ac1d05781fa051
- SSDEEP 6144:CcDFqBUKlfP/vVUuQjrWMGNrcOzQGXFL:CcEBUKZNzQTGRcY31
- TLSH T104649D1877EC9A01C27A4379E9B1C37057B4EC562A52D31B1BC4ECDB3E36B815E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
default
C2
-
127.0.0.1:1912
Targets
-
- Target f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd.exe
- Size 321KB
- SHA256 f87d5715903295e50a1c3d370d4fdc30be5128907dd660a3c3d96cde95fec7cd
- MD5 b28942080b8a748312a3fe374916ad79
- SHA1 fbd0bd60739a79944400feba0693747c908a4540
- SHA512 8dbd6f90edd978431c5eb609d34f8817c2277bba912eedbdc39e92c2282bb958ca1441d0a9917fc1cf4099b7e58dc9bf52ef96e842461c5c50ac1d05781fa051
- SSDEEP 6144:CcDFqBUKlfP/vVUuQjrWMGNrcOzQGXFL:CcEBUKZNzQTGRcY31
- TLSH T104649D1877EC9A01C27A4379E9B1C37057B4EC562A52D31B1BC4ECDB3E36B815E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload