Overview

overview

10

Static

static

Installer 2.0.exe

windows7-x64

10

Installer 2.0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Installer 2.0.rar

  • Size

    2.6MB

  • Sample

    220922-13draagbgm

  • MD5

    cd96d77570fa7a0fb6b7bf2f221f4f0d

  • SHA1

    c8f964a91face046fb9e22f56c23ce9834ca9627

  • SHA256

    978e91c1a1ab273aecebfa1a686a0110b3431fd1745034814673c86904909b71

  • SHA512

    85beb4356eec651bdaf2169b6708b3a53f1a7002d6b6e48af90143422e143d29737112ea94c1025566d52f944c44054a3563fafcfcefe13031ae5fdf9ca074b4

  • SSDEEP

    24576:WntPs6tYHqVDX6+eRaYKYOSfMI6wM2yGpddkJPQRmreCmf6oStu7qLXKiRYL8+WI:+ZLmqVDNe1xRZCTu7qLXKiRYa4tl3x

Score
10/10
redline@akkkermaninfostealerspyware

Malware Config

Extracted

Family

redline

Botnet

@akkkerman

C2

77.73.134.24:80

Attributes
  • auth_value

    0ba115baec822e8fab2188d69bd8b714

Targets

    • Target

      Installer 2.0.exe

    • Size

      2.6MB

    • MD5

      ec42526811236af065d26632d2b2cbba

    • SHA1

      11a9c8144dafa4b04f76f7a340da9a8c88d8a9a5

    • SHA256

      40b8d2368df2682276c4040a796a2e3197877002cfc36e95e3f929d0e91c9ad4

    • SHA512

      47702d715ee09a3fb4938adff8ddd325dd6368ebd80e56c5d1c8aa7efe10cc307fa43755942098cece6e37ee5644f018d16ac214ad6a1cecc9bb228b72734522

    • SSDEEP

      24576:yntPs6tYHqVDX6+eRaYKYOSfMI6wM2yGpddkJPQRmreCmf6oStu7qLXKiRYL8+Wi:6ZLmqVDNe1xRZCTu7qLXKiRYa4tl3f

    Score
    10/10
    redline@akkkermaninfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks