Overview

overview

10

Static

static

e6cb7b6bd4...4d.exe

windows7_x64

10

e6cb7b6bd4...4d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe

  • Size

    536KB

  • Sample

    210721-8b2lxzezf2

  • MD5

    a20ebb2a10324b073fd40110d9ee705d

  • SHA1

    33cf4d5e7bc35f9ef524ad9eb38c9e229ea128f1

  • SHA256

    e6cb7b6bd4848499533b29bdf85f60e362df435c6254d74521ad40dddfb77d1a

  • SHA512

    797dcb7dcc6cbfeadc65816ce1bc6dc140fcf7f7255b78cbb26702904af0853e97b614de3d958c3646e2d3f65417d923588836e3c745a50b767ff3db0706ae84

Score
10/10
redlinebuild2infostealer

Malware Config

Extracted

Family

redline

Botnet

Build2

C2

45.142.213.135:30059

Targets

    • Target

      e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe

    • Size

      536KB

    • MD5

      a20ebb2a10324b073fd40110d9ee705d

    • SHA1

      33cf4d5e7bc35f9ef524ad9eb38c9e229ea128f1

    • SHA256

      e6cb7b6bd4848499533b29bdf85f60e362df435c6254d74521ad40dddfb77d1a

    • SHA512

      797dcb7dcc6cbfeadc65816ce1bc6dc140fcf7f7255b78cbb26702904af0853e97b614de3d958c3646e2d3f65417d923588836e3c745a50b767ff3db0706ae84

    Score
    10/10
    redlinebuild2infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks