Overview

overview

10

Static

static

08204edf80...49.exe

windows7_x64

10

08204edf80...49.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08204edf80d6ea11bfa7860187cd2149

  • Size

    364KB

  • Sample

    211021-mmh46sabf6

  • MD5

    08204edf80d6ea11bfa7860187cd2149

  • SHA1

    d447ce2a738dd371a536795fd4102047f73535f2

  • SHA256

    e8c33c941b4c1f754f9d75d7ba2e2b07441421240877adc557f6b0ee75a5ada3

  • SHA512

    b24cc1f332db490b800b169cfc97389fe4bdee8b88e7f46afe7ad1c29e86899cb5bba27280dc350ce1ea957b39c465a90bfa5eeb3adf4fc29764364c291fc35d

Score
10/10
redlinepaladininfostealer

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Targets

    • Target

      08204edf80d6ea11bfa7860187cd2149

    • Size

      364KB

    • MD5

      08204edf80d6ea11bfa7860187cd2149

    • SHA1

      d447ce2a738dd371a536795fd4102047f73535f2

    • SHA256

      e8c33c941b4c1f754f9d75d7ba2e2b07441421240877adc557f6b0ee75a5ada3

    • SHA512

      b24cc1f332db490b800b169cfc97389fe4bdee8b88e7f46afe7ad1c29e86899cb5bba27280dc350ce1ea957b39c465a90bfa5eeb3adf4fc29764364c291fc35d

    Score
    10/10
    redlinepaladininfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks