Overview

overview

10

Static

static

c91ee695fb...a8.exe

windows7_x64

10

c91ee695fb...a8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c91ee695fb403d39fb7a7d226fea9a859645451b41dd2739bc61920b39ceb1a8

  • Size

    1.3MB

  • Sample

    220516-b9jtfabeep

  • MD5

    d0eae19aa9c5bddb4bb42ca64d1f0c93

  • SHA1

    dc03c706821b0fcd0621e35caa6f76812c764d11

  • SHA256

    c91ee695fb403d39fb7a7d226fea9a859645451b41dd2739bc61920b39ceb1a8

  • SHA512

    40caa2f3a0b22b152831c48c0e3b22b53ee91f50369eb0039084ed2a255e4fc6bd2f64b68f849a14781e07da22c5e5fa8e1a4d20533c8eb78d031cad75412f71

Score
10/10
redlinenowinfostealer

Malware Config

Extracted

Family

redline

Botnet

now

C2

185.193.38.27:80

Targets

    • Target

      c91ee695fb403d39fb7a7d226fea9a859645451b41dd2739bc61920b39ceb1a8

    • Size

      1.3MB

    • MD5

      d0eae19aa9c5bddb4bb42ca64d1f0c93

    • SHA1

      dc03c706821b0fcd0621e35caa6f76812c764d11

    • SHA256

      c91ee695fb403d39fb7a7d226fea9a859645451b41dd2739bc61920b39ceb1a8

    • SHA512

      40caa2f3a0b22b152831c48c0e3b22b53ee91f50369eb0039084ed2a255e4fc6bd2f64b68f849a14781e07da22c5e5fa8e1a4d20533c8eb78d031cad75412f71

    Score
    10/10
    redlinenowinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks