Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06c411c61f7d71394548da2a335efd41f1931d8b7cffe40575c50b934902226a

  • Size

    384KB

  • Sample

    220212-gn7w2aggc9

  • MD5

    63450801ed81897a4b672430c043d0cd

  • SHA1

    4c71ef8018cff1084e0ef1aef161cc60fcb19ee9

  • SHA256

    06c411c61f7d71394548da2a335efd41f1931d8b7cffe40575c50b934902226a

  • SHA512

    5283620e2f97e4f119a867a4483934792508d7ac868593fb77c5c7c9ab707a5d64071ca349a91e6480e463277d561e097ae01cea252fba7d706f85fbf5d0ec47

Score
10/10
redlineruzkikakoytoinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      06c411c61f7d71394548da2a335efd41f1931d8b7cffe40575c50b934902226a

    • Size

      384KB

    • MD5

      63450801ed81897a4b672430c043d0cd

    • SHA1

      4c71ef8018cff1084e0ef1aef161cc60fcb19ee9

    • SHA256

      06c411c61f7d71394548da2a335efd41f1931d8b7cffe40575c50b934902226a

    • SHA512

      5283620e2f97e4f119a867a4483934792508d7ac868593fb77c5c7c9ab707a5d64071ca349a91e6480e463277d561e097ae01cea252fba7d706f85fbf5d0ec47

    Score
    10/10
    redlineruzkikakoytoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks