Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0bc8d18c348f1eee519babe08ea9792a0423841f6a4ec03bfc09c80a4cc7776

  • Size

    440KB

  • Sample

    220213-s7j5vsbdf6

  • MD5

    3a9aa20ff49128328abd60c86855a6d7

  • SHA1

    c4e86530c8befc2302e796e1becce99f76720846

  • SHA256

    b0bc8d18c348f1eee519babe08ea9792a0423841f6a4ec03bfc09c80a4cc7776

  • SHA512

    f8cf8cabe5d9c0593784c1896d54f5203b66a5cdfcae5b37fc6f48781ae16ced9d57ff4c85c6cf96ad37727dafbb4900ed39b1e755b7feaf1f3a4aa81f21298a

Score
10/10
redlineruzkikakoytoinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      b0bc8d18c348f1eee519babe08ea9792a0423841f6a4ec03bfc09c80a4cc7776

    • Size

      440KB

    • MD5

      3a9aa20ff49128328abd60c86855a6d7

    • SHA1

      c4e86530c8befc2302e796e1becce99f76720846

    • SHA256

      b0bc8d18c348f1eee519babe08ea9792a0423841f6a4ec03bfc09c80a4cc7776

    • SHA512

      f8cf8cabe5d9c0593784c1896d54f5203b66a5cdfcae5b37fc6f48781ae16ced9d57ff4c85c6cf96ad37727dafbb4900ed39b1e755b7feaf1f3a4aa81f21298a

    Score
    10/10
    redlineruzkikakoytoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1

MITRE ATT&CK Matrix

Tasks