Overview

overview

10

Static

static

QUOTEGMC 9...DF.exe

windows7_x64

10

QUOTEGMC 9...DF.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QUOTEGMC 92304882399300PDF.exe

  • Size

    678KB

  • Sample

    210726-an9v8djwqx

  • MD5

    c3db750d60ba421e7abce39df3db36a0

  • SHA1

    7d33791ed6641b2a56c6991f6bbb4f3671dcfd1f

  • SHA256

    cd71be4c68543a67557c0a3298ec184f9d60e8c84237aa598e351c056d884b5f

  • SHA512

    917165cf943091bc868fcc6a77b38925513a66b115554d2a9df820ce43868777d05c32cda37a4f093d164211408c926d069831d8131cc5dff66c3e4792085a33

Score
10/10
redlineinfostealer

Malware Config

Extracted

Family

redline

C2

biggz957.duckdns.org:43393

Targets

    • Target

      QUOTEGMC 92304882399300PDF.exe

    • Size

      678KB

    • MD5

      c3db750d60ba421e7abce39df3db36a0

    • SHA1

      7d33791ed6641b2a56c6991f6bbb4f3671dcfd1f

    • SHA256

      cd71be4c68543a67557c0a3298ec184f9d60e8c84237aa598e351c056d884b5f

    • SHA512

      917165cf943091bc868fcc6a77b38925513a66b115554d2a9df820ce43868777d05c32cda37a4f093d164211408c926d069831d8131cc5dff66c3e4792085a33

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • CustAttr .NET packer

      Detects CustAttr .NET packer in memory.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks