Overview

overview

10

Static

static

51cb438351...4c.exe

windows7_x64

10

51cb438351...4c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51cb4383518e4d2ca519ab6c8874fc4c.exe

  • Size

    358KB

  • Sample

    210608-5p2pwyj382

  • MD5

    51cb4383518e4d2ca519ab6c8874fc4c

  • SHA1

    e8875494406aa10c347edea47fa8e607194023e3

  • SHA256

    3bec59f84c4d86172ce1bfdd8d2f43ab1e679155620852c13f44cfe5cd95a0fd

  • SHA512

    11490c1e5ca5da171204709adf1cb6cd23b4c3cee8f437147b8ebf5d7f07e24bf3e7611359cce68b1270f36ebc8e2bf2f92de38648dcef2ea9d5acddb79f9927

Score
10/10
redlinekolyainfostealer

Malware Config

Extracted

Family

redline

Botnet

Kolya

C2

195.201.17.219:25524

Targets

    • Target

      51cb4383518e4d2ca519ab6c8874fc4c.exe

    • Size

      358KB

    • MD5

      51cb4383518e4d2ca519ab6c8874fc4c

    • SHA1

      e8875494406aa10c347edea47fa8e607194023e3

    • SHA256

      3bec59f84c4d86172ce1bfdd8d2f43ab1e679155620852c13f44cfe5cd95a0fd

    • SHA512

      11490c1e5ca5da171204709adf1cb6cd23b4c3cee8f437147b8ebf5d7f07e24bf3e7611359cce68b1270f36ebc8e2bf2f92de38648dcef2ea9d5acddb79f9927

    Score
    10/10
    redlinekolyainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks