Overview

overview

10

Static

static

32ad271331...67.exe

windows7_x64

10

32ad271331...67.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32ad2713313dcf30a66402b405278167

  • Size

    481KB

  • Sample

    211014-cjg3lafeeq

  • MD5

    32ad2713313dcf30a66402b405278167

  • SHA1

    108f4a1cef7ab49cddb8872b945692b34afe4fcf

  • SHA256

    d9954ff3216b822c0d2ed2355bfa7203704d5a921052bd4d5b38644e31441c16

  • SHA512

    cce8e3a6caf2f8fcb3cafc56d1283055eba037886fff7ff3cb80831f5c53a1f238ab78bc7b8155c562561a519ffec7d52d01174923803aeaac09716a15a13081

Score
10/10
redline01infostealer

Malware Config

Extracted

Family

redline

Botnet

01

C2

103.156.90.100:60372

Targets

    • Target

      32ad2713313dcf30a66402b405278167

    • Size

      481KB

    • MD5

      32ad2713313dcf30a66402b405278167

    • SHA1

      108f4a1cef7ab49cddb8872b945692b34afe4fcf

    • SHA256

      d9954ff3216b822c0d2ed2355bfa7203704d5a921052bd4d5b38644e31441c16

    • SHA512

      cce8e3a6caf2f8fcb3cafc56d1283055eba037886fff7ff3cb80831f5c53a1f238ab78bc7b8155c562561a519ffec7d52d01174923803aeaac09716a15a13081

    Score
    10/10
    redline01infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks