Overview

overview

10

Static

static

10

slot7.exe

windows7_x64

10

slot7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    slot7.exe

  • Size

    104KB

  • Sample

    220219-jtdw9aafan

  • MD5

    abe3eeb6a37d82e725b86e3120e584eb

  • SHA1

    8df2701e65b17601de19c3a18c6c55f96784d97d

  • SHA256

    fbc24a9119f2484a25026cb05cb52d1377b88bda8d6aef13cf32714680c13ade

  • SHA512

    b22819bff2102078315766fdf1d0827e1754619169ff592a13932ea658e8bfebfeadc09971197562dbf6f3d4efe0a455e0cc49b2b939d2a3a8c503a47c50922b

Score
10/10
redline1infostealer

Malware Config

Extracted

Family

redline

Botnet

1

C2

195.2.79.72:13533

Attributes
  • auth_value

    571271d568dd4719d920af9011a9704e

Targets

    • Target

      slot7.exe

    • Size

      104KB

    • MD5

      abe3eeb6a37d82e725b86e3120e584eb

    • SHA1

      8df2701e65b17601de19c3a18c6c55f96784d97d

    • SHA256

      fbc24a9119f2484a25026cb05cb52d1377b88bda8d6aef13cf32714680c13ade

    • SHA512

      b22819bff2102078315766fdf1d0827e1754619169ff592a13932ea658e8bfebfeadc09971197562dbf6f3d4efe0a455e0cc49b2b939d2a3a8c503a47c50922b

    Score
    10/10
    redline1infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks