Overview

overview

10

Static

static

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    397KB

  • Sample

    220821-c5sffsbgdn

  • MD5

    e46f80ad123b84740d3fa93c510f4d6b

  • SHA1

    a38a7536dbe67be239178f744f49592b6f57dd78

  • SHA256

    8f00e9b2c63600af5efc5f6b5bf9e0ace5fbd18f6bd812f2f82b268a90b6f88b

  • SHA512

    6634a7f526e4e4bee7d883c1585a84dc3036ef5b843304dde73bf977807edb97f7eab1a5061f718a9d96db795bc57dc29047e5d0ac43e7961928b610da5ab89f

  • SSDEEP

    12288:Pnjbh29I5pqsqmtmkrrMsyQLJ/+DaV6i+g1/auQjYSt:J29I9L9LR+C+YYL

Score
10/10
redlineruzkiinfostealer

Malware Config

Extracted

Family

redline

Botnet

ruzki

C2

193.106.191.165:39482

Attributes
  • auth_value

    71a0558c0eea274a5bd617ea85786884

Targets

    • Target

      tmp

    • Size

      397KB

    • MD5

      e46f80ad123b84740d3fa93c510f4d6b

    • SHA1

      a38a7536dbe67be239178f744f49592b6f57dd78

    • SHA256

      8f00e9b2c63600af5efc5f6b5bf9e0ace5fbd18f6bd812f2f82b268a90b6f88b

    • SHA512

      6634a7f526e4e4bee7d883c1585a84dc3036ef5b843304dde73bf977807edb97f7eab1a5061f718a9d96db795bc57dc29047e5d0ac43e7961928b610da5ab89f

    • SSDEEP

      12288:Pnjbh29I5pqsqmtmkrrMsyQLJ/+DaV6i+g1/auQjYSt:J29I9L9LR+C+YYL

    Score
    10/10
    redlineruzkiinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks