General
- Target 4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929.exe
- Size 321KB
- Sample261019-j2bf4afs5p
- SHA256 4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929
- MD5 683e2c4091b8947da3a092749bf2c12e
- SHA1 1ade715cb9aff73be53a066f1ff6308f8997e1b2
- SHA512 b88bc3e9a1d246452225f428467c47934eaefc73612f3f796d97854485693fa28ecedc6be1625d8e1075b0c841c0f0b92bfc9b7ce8014f4e197846670da93e8e
- SSDEEP 3072:oXMDFq93bh3Injd7mWOCAlfPdNvVU1m2iQeY/A1YWMcoqwYCEw+nrKOzQGXu7MTL:ocDFqTdlfP/vVUuQjrWMGNrKOzQGX9L
- TLSH T1ED649D1877E89A01C27A4379E9B1C37057B4EC562A53D31B1BC4ECDB3E76B814E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
test
C2
-
127.0.0.1:1912
Targets
-
- Target 4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929.exe
- Size 321KB
- SHA256 4f1271f35cb5bfdb456481302e219e5b8e7341bf1e871bd5f4cdc6636da18929
- MD5 683e2c4091b8947da3a092749bf2c12e
- SHA1 1ade715cb9aff73be53a066f1ff6308f8997e1b2
- SHA512 b88bc3e9a1d246452225f428467c47934eaefc73612f3f796d97854485693fa28ecedc6be1625d8e1075b0c841c0f0b92bfc9b7ce8014f4e197846670da93e8e
- SSDEEP 3072:oXMDFq93bh3Injd7mWOCAlfPdNvVU1m2iQeY/A1YWMcoqwYCEw+nrKOzQGXu7MTL:ocDFqTdlfP/vVUuQjrWMGNrKOzQGX9L
- TLSH T1ED649D1877E89A01C27A4379E9B1C37057B4EC562A53D31B1BC4ECDB3E76B814E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload