Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8b9844daf7785dde22c233a7fae1abdc2ec14db4380735b3890c28cb57d26c1

  • Size

    385KB

  • Sample

    220212-jbze8sbbaq

  • MD5

    c708ad0d3115e59d5d01f415b1f4d4a9

  • SHA1

    f33c2245b17d6367533706a3858593006be12e08

  • SHA256

    e8b9844daf7785dde22c233a7fae1abdc2ec14db4380735b3890c28cb57d26c1

  • SHA512

    30f028e8f9f820a282574bc78378a8d477f6bd21597c4cb20b89f36c2db91cd809b37f1a812cd5f75fafe52e7744e027fe4b8d7a08da36e2dc7d9842d82883cd

Score
10/10
redlineruzkikakoytoinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      e8b9844daf7785dde22c233a7fae1abdc2ec14db4380735b3890c28cb57d26c1

    • Size

      385KB

    • MD5

      c708ad0d3115e59d5d01f415b1f4d4a9

    • SHA1

      f33c2245b17d6367533706a3858593006be12e08

    • SHA256

      e8b9844daf7785dde22c233a7fae1abdc2ec14db4380735b3890c28cb57d26c1

    • SHA512

      30f028e8f9f820a282574bc78378a8d477f6bd21597c4cb20b89f36c2db91cd809b37f1a812cd5f75fafe52e7744e027fe4b8d7a08da36e2dc7d9842d82883cd

    Score
    10/10
    redlineruzkikakoytoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks