Overview

overview

10

Static

static

10

1732-226-0...ry.exe

windows7-x64

10

1732-226-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1732-226-0x0000000002160000-0x0000000002184000-memory.dmp

  • Size

    144KB

  • Sample

    220819-t7nnqafhcn

  • MD5

    a6f6b92cc9004b9c729a056f3aca1e2b

  • SHA1

    09ebb1cd99b3aec1114f13ad47679b721be00a02

  • SHA256

    bed7061dd05c6eff18c3ff781b6247172e9412e68e9cb1f66332cb99cccfe345

  • SHA512

    f471b6e51662a9423ad3de274dc18d41a3a797c35b83ba156037847fe36f9af49b81c1915a0b67acaa3f8a87188276fae240922f346dac350df18bec05da4e58

  • SSDEEP

    3072:zKBsz32Qcdp6F0WtZkeMMMMMMMMMMMMMMMMMMMMM7eMMMMMMMMMMMMMMMMMMMMME:zKycUtIVxyaxp

Score
10/10
redlinejamesfuckinfostealer

Malware Config

Extracted

Family

redline

Botnet

jamesfuck

C2

65.108.20.195:6774

Targets

    • Target

      1732-226-0x0000000002160000-0x0000000002184000-memory.dmp

    • Size

      144KB

    • MD5

      a6f6b92cc9004b9c729a056f3aca1e2b

    • SHA1

      09ebb1cd99b3aec1114f13ad47679b721be00a02

    • SHA256

      bed7061dd05c6eff18c3ff781b6247172e9412e68e9cb1f66332cb99cccfe345

    • SHA512

      f471b6e51662a9423ad3de274dc18d41a3a797c35b83ba156037847fe36f9af49b81c1915a0b67acaa3f8a87188276fae240922f346dac350df18bec05da4e58

    • SSDEEP

      3072:zKBsz32Qcdp6F0WtZkeMMMMMMMMMMMMMMMMMMMMM7eMMMMMMMMMMMMMMMMMMMMME:zKycUtIVxyaxp

    Score
    10/10
    redlinejamesfuckinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks