Overview

overview

10

Static

static

A4.exe

windows7_x64

10

A4.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    A4.exe

  • Size

    421KB

  • Sample

    210602-p8ryz9jfcx

  • MD5

    6972482b38fda49d5ea9f11bd2496909

  • SHA1

    3f70b20432fa4ceb9cff4c3bd28028183d7e6fa3

  • SHA256

    69e411368f9407c3c25b453792bd383fed96eb6bb6a7e9d0cf06d980add295c6

  • SHA512

    364238d4e97a6811f3fa3942ce528e4fd0a0666539d881d43c7e37428dbe6a05c1fc018e873ba3d02fe0bfee6522013f361fd8c8962dad99ef4734207b71079e

Score
10/10
redlinenewinfostealer

Malware Config

Extracted

Family

redline

Botnet

new

C2

45.134.225.35:7821

Targets

    • Target

      A4.exe

    • Size

      421KB

    • MD5

      6972482b38fda49d5ea9f11bd2496909

    • SHA1

      3f70b20432fa4ceb9cff4c3bd28028183d7e6fa3

    • SHA256

      69e411368f9407c3c25b453792bd383fed96eb6bb6a7e9d0cf06d980add295c6

    • SHA512

      364238d4e97a6811f3fa3942ce528e4fd0a0666539d881d43c7e37428dbe6a05c1fc018e873ba3d02fe0bfee6522013f361fd8c8962dad99ef4734207b71079e

    Score
    10/10
    redlinenewinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks