General
- Target f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d.bin
- Size 321KB
- Sample261019-lygj2sttex
- SHA256 f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d
- MD5 8cb63ec528985e59a1f67c5527d5adad
- SHA1 35849158ce2e24dbd14ce444b30fd4507bcd2fd9
- SHA512 2e590ceb1f0d3740c03c0002dd01be6954b4710892ef9accf4ea083a28ac1a43e80044da3ce4458940d3fe33629a83614275ea109f32d68ede8d5d748672cefc
- SSDEEP 3072:oXMDFq93bh3Injd7mWOCAlfPdNvVU1m2iQeY/A1YWMcoqwYCEw+nrKOzQGcu7MTL:ocDFqTdlfP/vVUuQjrWMGNrKOzQGc9L
- TLSH T111649D1877E89A01C27A4379E9B1C37057B4EC562A53D31B1BC4ECDB3E76B814E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
test
C2
-
127.0.0.1:1912
Targets
-
- Target f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d.bin
- Size 321KB
- SHA256 f7856dc0d9a74e8bccfc47b55b24fe170f568b87feb7a8cb9c54fd81eee0f68d
- MD5 8cb63ec528985e59a1f67c5527d5adad
- SHA1 35849158ce2e24dbd14ce444b30fd4507bcd2fd9
- SHA512 2e590ceb1f0d3740c03c0002dd01be6954b4710892ef9accf4ea083a28ac1a43e80044da3ce4458940d3fe33629a83614275ea109f32d68ede8d5d748672cefc
- SSDEEP 3072:oXMDFq93bh3Injd7mWOCAlfPdNvVU1m2iQeY/A1YWMcoqwYCEw+nrKOzQGcu7MTL:ocDFqTdlfP/vVUuQjrWMGNrKOzQGc9L
- TLSH T111649D1877E89A01C27A4379E9B1C37057B4EC562A53D31B1BC4ECDB3E76B814E80A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload