Overview

overview

10

Static

static

812cc32c94...am.exe

windows7_x64

10

812cc32c94...am.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    812cc32c949c5e81e2d51240cca8635f.ppam.vir

  • Size

    1.3MB

  • Sample

    220628-pgalyshcgk

  • MD5

    812cc32c949c5e81e2d51240cca8635f

  • SHA1

    e516f99fcdf3be7ee84de5b3d7142155361954fa

  • SHA256

    29f3afd8d3a186f5824eaa26f2b0a7b9f4456737ade68ce44d0e72267eda1972

  • SHA512

    96107d2d760e96818c43e94331c8279e157fbe0956e106bf32b07c60727fd32fc12d971c43d751a0af5ceaefb17fe6db7bff48647864be40546570a79e970cba

Score
10/10
redline76infostealer

Malware Config

Extracted

Family

redline

Botnet

76

C2

139.99.32.83:43199

Attributes
  • auth_value

    44d461325298129ed3c705440f57962c

Targets

    • Target

      812cc32c949c5e81e2d51240cca8635f.ppam.vir

    • Size

      1.3MB

    • MD5

      812cc32c949c5e81e2d51240cca8635f

    • SHA1

      e516f99fcdf3be7ee84de5b3d7142155361954fa

    • SHA256

      29f3afd8d3a186f5824eaa26f2b0a7b9f4456737ade68ce44d0e72267eda1972

    • SHA512

      96107d2d760e96818c43e94331c8279e157fbe0956e106bf32b07c60727fd32fc12d971c43d751a0af5ceaefb17fe6db7bff48647864be40546570a79e970cba

    Score
    10/10
    redline76infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks