Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472

  • Size

    406KB

  • Sample

    211020-qysdrshbb4

  • MD5

    92ab32cdf89c33206734d0c247d38faa

  • SHA1

    b599d40ddb3ea41606016db72ce8d6f9fb98bca4

  • SHA256

    73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472

  • SHA512

    8434ce86250abad3e8e80c3b550405780289d310c9608e64a9d0a6a07316409cf1f15d82fd3dbcdb51bd3b41cc9b6c05a34215565e3d5f16648ebc4d410db116

Score
10/10
redlineudpinfostealer

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.182:52236

Targets

    • Target

      73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472

    • Size

      406KB

    • MD5

      92ab32cdf89c33206734d0c247d38faa

    • SHA1

      b599d40ddb3ea41606016db72ce8d6f9fb98bca4

    • SHA256

      73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472

    • SHA512

      8434ce86250abad3e8e80c3b550405780289d310c9608e64a9d0a6a07316409cf1f15d82fd3dbcdb51bd3b41cc9b6c05a34215565e3d5f16648ebc4d410db116

    Score
    10/10
    redlineudpinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks