Overview

overview

10

Static

static

10

buil 2.exe

windows7_x64

10

buil 2.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89633589.exe

  • Size

    43KB

  • Sample

    220317-g92xxaaafp

  • MD5

    cbf937f2765f81fc3d24d433edc434ef

  • SHA1

    1709b65696a5c73a0f4acbac2c2e16be05bbfc54

  • SHA256

    db66fc3c896813280ef60ba06dd03d7a7ba5b554ae4f18472168e868a4a6ccb3

  • SHA512

    d1f81de9494905663b77872f5f5fe9ded38e951a2cd07c5e5199d274b5f13011340908dc4810af4a3247d28b667a6d92bc516f913d7f1ee87ecf87341afe9cd7

Score
10/10
redlinefirefoxinfostealer

Malware Config

Extracted

Family

redline

Botnet

firefox

C2

45.77.42.218:1753

Attributes
  • auth_value

    1f07c368f7f69023a22d1351d2f1bd41

Targets

    • Target

      buil 2.exe

    • Size

      107KB

    • MD5

      9e3d2a331c57fcaf3824307d033f1930

    • SHA1

      3f455f14db41f8227fccdde0a62ac4a594051e9e

    • SHA256

      cf86cb002e196c5c2412fdbc4bda9a72179378f52e0d56300965a4231d2734de

    • SHA512

      49e08267689b8244c5cc99b1a426bfd029c15580d7f241cbfa73fc3059420afcedfa8cc39d23b01404dd0f0f04fb28dd68d76328d8611cab7b9a7a8686220c90

    Score
    10/10
    redlinefirefoxinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks