Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea4e9352c4aec33f173e1918744ac6dfc4038e5f1073bc652824000e64bc63a9

  • Size

    337KB

  • Sample

    211021-n89ppabbar

  • MD5

    13595970f6a542c52f72975c924ce98c

  • SHA1

    55b194de29af436431aed87a5a0ed778f3e0c032

  • SHA256

    ea4e9352c4aec33f173e1918744ac6dfc4038e5f1073bc652824000e64bc63a9

  • SHA512

    428eb47f86fd5752d1d07be81498117d716c7c66772b827ef5c06a20db50d8c1f70d845c93c5f39f9ffedd1100c6e472faaa29b429ec8731c34f1c3de2cf9128

Score
10/10
redlineudpinfostealer

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.182:52236

Targets

    • Target

      ea4e9352c4aec33f173e1918744ac6dfc4038e5f1073bc652824000e64bc63a9

    • Size

      337KB

    • MD5

      13595970f6a542c52f72975c924ce98c

    • SHA1

      55b194de29af436431aed87a5a0ed778f3e0c032

    • SHA256

      ea4e9352c4aec33f173e1918744ac6dfc4038e5f1073bc652824000e64bc63a9

    • SHA512

      428eb47f86fd5752d1d07be81498117d716c7c66772b827ef5c06a20db50d8c1f70d845c93c5f39f9ffedd1100c6e472faaa29b429ec8731c34f1c3de2cf9128

    Score
    10/10
    redlineudpinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks