Overview

overview

10

Static

static

10

1336-55-0x...ry.exe

windows7_x64

10

1336-55-0x...ry.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1336-55-0x0000000000A60000-0x0000000000A80000-memory.dmp

  • Size

    128KB

  • Sample

    220622-gvr46agfhj

  • MD5

    44f5a11de3059301102a8f8463a50396

  • SHA1

    6f351a2ea810a85bef7970aca729473c8bc52b59

  • SHA256

    3ea3a1afd840c994e3da1e6300430671a8c5a8c4048b3370d4d77e48d7593f2b

  • SHA512

    edc1288cf2132d20e2fd78d9ebdad6867437cb5e2d08498ccdc9054c7b442f305b426719381f0c02833f6a9abea1668bb8b4705a238aff4c9b5a69be92bfc108

Score
10/10
redline76infostealer

Malware Config

Extracted

Family

redline

Botnet

76

C2

139.99.32.83:43199

Attributes
  • auth_value

    44d461325298129ed3c705440f57962c

Targets

    • Target

      1336-55-0x0000000000A60000-0x0000000000A80000-memory.dmp

    • Size

      128KB

    • MD5

      44f5a11de3059301102a8f8463a50396

    • SHA1

      6f351a2ea810a85bef7970aca729473c8bc52b59

    • SHA256

      3ea3a1afd840c994e3da1e6300430671a8c5a8c4048b3370d4d77e48d7593f2b

    • SHA512

      edc1288cf2132d20e2fd78d9ebdad6867437cb5e2d08498ccdc9054c7b442f305b426719381f0c02833f6a9abea1668bb8b4705a238aff4c9b5a69be92bfc108

    Score
    10/10
    redline76infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks