Overview

overview

10

Static

static

b4197abdbe...f2.exe

windows7_x64

10

b4197abdbe...f2.exe

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4197abdbe29622df210260324de401562176ddd943b64c7a4a0439074889cf2

  • Size

    443KB

  • Sample

    220215-hqx1aacab5

  • MD5

    e503139e9ff7c424fdfc6b32fdd2f552

  • SHA1

    56d916ea1b8b8d07a7d2617ad7c9bad19e26c91f

  • SHA256

    b4197abdbe29622df210260324de401562176ddd943b64c7a4a0439074889cf2

  • SHA512

    e820fb2a44fbcb831864565ee558bd75db6af51d2f5d18be8712a7e135a28160b6add328ad98733fa969a464cd1accd9016c187f940671ae8cc7cfd3befa4f34

Score
10/10
redlineudptestinfostealer

Malware Config

Extracted

Family

redline

Botnet

udptest

C2

193.56.146.64:65441

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      b4197abdbe29622df210260324de401562176ddd943b64c7a4a0439074889cf2

    • Size

      443KB

    • MD5

      e503139e9ff7c424fdfc6b32fdd2f552

    • SHA1

      56d916ea1b8b8d07a7d2617ad7c9bad19e26c91f

    • SHA256

      b4197abdbe29622df210260324de401562176ddd943b64c7a4a0439074889cf2

    • SHA512

      e820fb2a44fbcb831864565ee558bd75db6af51d2f5d18be8712a7e135a28160b6add328ad98733fa969a464cd1accd9016c187f940671ae8cc7cfd3befa4f34

    Score
    10/10
    redlineudptestinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks