Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    837f00b506fd3e94fc963662f9c7c719bcebfb9b5ff2c0b91901e6a0c2300f9c

  • Size

    384KB

  • Sample

    220212-c685lafag6

  • MD5

    f5a59430f7041d4a6878f47058d711ca

  • SHA1

    17e0c29f7d579f0d5e8041f62ed011f818d23516

  • SHA256

    837f00b506fd3e94fc963662f9c7c719bcebfb9b5ff2c0b91901e6a0c2300f9c

  • SHA512

    68c7eb28acb4dd2df72b2c625ab24271093e2ef0fbd9a41b7af9d7efa8277eaf3779229f938a077706e4dd6c5bbd578e49f4179414b3c87e8c666406378bfeab

Score
10/10
redlineruzkikakoytoinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      837f00b506fd3e94fc963662f9c7c719bcebfb9b5ff2c0b91901e6a0c2300f9c

    • Size

      384KB

    • MD5

      f5a59430f7041d4a6878f47058d711ca

    • SHA1

      17e0c29f7d579f0d5e8041f62ed011f818d23516

    • SHA256

      837f00b506fd3e94fc963662f9c7c719bcebfb9b5ff2c0b91901e6a0c2300f9c

    • SHA512

      68c7eb28acb4dd2df72b2c625ab24271093e2ef0fbd9a41b7af9d7efa8277eaf3779229f938a077706e4dd6c5bbd578e49f4179414b3c87e8c666406378bfeab

    Score
    10/10
    redlineruzkikakoytoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks