General
- Target AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe
- Size 390KB
- Sample221017-pf2daabgc9
- SHA256 af4e159a331de4586e272e8e01881dad17fe56ee168e2cffb9d192cd95bbdb26
- MD5 67d73eee2d49a0c5478da1b6db80f510
- SHA1 cf1837863ef2c5e992171b6f358a7e623645a32d
- SHA512 997aa3fa5d0040314a38f1d8417d542244588487fdba5f62072332344f549ef6ad54d71c579b7d1150eb60ff1f56e079b0b5777724690d66cb3df45b1420ae1e
- SSDEEP 6144:RX+ZyZVodVOZq5naa+0xE61RUvG6DaRmZuNYETh0bKsH:RXuyZiON10B1OvMYEdKJH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe
Resource
win7-20220901-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
123
C2
-
linevanarsor.xyz:80
Attributes
-
auth_value
2ba7272bc8a774035124ae0b1d705e91
Targets
-
- Target AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe
- Size 390KB
- SHA256 af4e159a331de4586e272e8e01881dad17fe56ee168e2cffb9d192cd95bbdb26
- MD5 67d73eee2d49a0c5478da1b6db80f510
- SHA1 cf1837863ef2c5e992171b6f358a7e623645a32d
- SHA512 997aa3fa5d0040314a38f1d8417d542244588487fdba5f62072332344f549ef6ad54d71c579b7d1150eb60ff1f56e079b0b5777724690d66cb3df45b1420ae1e
- SSDEEP 6144:RX+ZyZVodVOZq5naa+0xE61RUvG6DaRmZuNYETh0bKsH:RXuyZiON10B1OvMYEdKJH
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload