Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88de28d38ec537a0e8a7e18a2eccc69e76b6642af24a57c7f80edc2b71934dd8

  • Size

    451KB

  • Sample

    220211-296w3sfadj

  • MD5

    f6e43f95d667038431f1db7ec229ace2

  • SHA1

    1bd6e7c0c724e99c4d6cabd80aa504081cd6408b

  • SHA256

    88de28d38ec537a0e8a7e18a2eccc69e76b6642af24a57c7f80edc2b71934dd8

  • SHA512

    ad4ffe22758b948e47ade460e1859dfc30f95a8609811e09e800ec291a2d54b7a8888b12952efc34e048ea30c07de484a6c578a97a4e68ac747d54099b341f30

Score
10/10
redlineruzkikakoytoinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      88de28d38ec537a0e8a7e18a2eccc69e76b6642af24a57c7f80edc2b71934dd8

    • Size

      451KB

    • MD5

      f6e43f95d667038431f1db7ec229ace2

    • SHA1

      1bd6e7c0c724e99c4d6cabd80aa504081cd6408b

    • SHA256

      88de28d38ec537a0e8a7e18a2eccc69e76b6642af24a57c7f80edc2b71934dd8

    • SHA512

      ad4ffe22758b948e47ade460e1859dfc30f95a8609811e09e800ec291a2d54b7a8888b12952efc34e048ea30c07de484a6c578a97a4e68ac747d54099b341f30

    Score
    10/10
    redlineruzkikakoytoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks