Overview

overview

10

Static

static

e62f8b2b2e...32.exe

windows7_x64

10

e62f8b2b2e...32.exe

windows10-2004_x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    e62f8b2b2e58cc69bcf78c2de8950632.exe
  • Size 26KB
  • Sample220625-h931msddc3
  • SHA256 45df9995510ec401fdd4de1d83fa56096e9c28fd97d07c5f44f80cf7acf78458
  • MD5 SHA1 SHA512
Score
10/10
redlinebuildinfostealerspyware

Malware Config

Extracted

Family

  • redline

Botnet

  • build

C2

  • 172.93.213.137:7525

Targets

    • Target
      e62f8b2b2e58cc69bcf78c2de8950632.exe
    • Size 26KB
    • SHA256 45df9995510ec401fdd4de1d83fa56096e9c28fd97d07c5f44f80cf7acf78458
    • MD5 SHA1 SHA512
    Score
    10/10
    redlinebuildinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks