Overview

overview

10

Static

static

482ff6ca21...52.exe

windows7-x64

10

482ff6ca21...52.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    482ff6ca210ab6accbcf1582b9f9b052.exe
  • Size 228KB
  • Sample220907-m6vbjsbhb7
  • SHA256 6e875f8f6277e5fec0f23f982c7d2dbc730408f10353053f19aa3e0ed2e2ea06
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
redline747infostealerspyware

Malware Config

Extracted

Family

  • redline

Botnet

  • 747

C2

  • 78.153.144.6:2510

Attributes
  • auth_value

    842e51893ada92572d9bc2e846237976

Targets

    • Target
      482ff6ca210ab6accbcf1582b9f9b052.exe
    • Size 228KB
    • SHA256 6e875f8f6277e5fec0f23f982c7d2dbc730408f10353053f19aa3e0ed2e2ea06
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    redline747infostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks