Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6041dddee41fdb6417fac38903febee6806df4f7e660168960ec5c488a1e689

  • Size

    770KB

  • Sample

    221003-lfn66shdbl

  • MD5

    87344d11de607917dd2642ea449fce22

  • SHA1

    f525d06c5588a3b0735c4fc58ba5eaa118e777e1

  • SHA256

    a6041dddee41fdb6417fac38903febee6806df4f7e660168960ec5c488a1e689

  • SHA512

    cc833953f8dc916209ac45634b1b3199f3037dcea0fbc1c7c7ebcd5c12500f0a0e9d409d97821273805270266125a2a60cddcd5e5dc8c992fccdbc3709799449

  • SSDEEP

    12288:7Os17OgXMh/pz8VSgrdMxDemo+7mtih+rqG7K4HTN:7R1qgXMh6M51o+7m4Aq

Score
10/10
redlinesirusinfostealer

Malware Config

Extracted

Family

redline

Botnet

sirus

C2

147.124.223.126:4444

Targets

    • Target

      a6041dddee41fdb6417fac38903febee6806df4f7e660168960ec5c488a1e689

    • Size

      770KB

    • MD5

      87344d11de607917dd2642ea449fce22

    • SHA1

      f525d06c5588a3b0735c4fc58ba5eaa118e777e1

    • SHA256

      a6041dddee41fdb6417fac38903febee6806df4f7e660168960ec5c488a1e689

    • SHA512

      cc833953f8dc916209ac45634b1b3199f3037dcea0fbc1c7c7ebcd5c12500f0a0e9d409d97821273805270266125a2a60cddcd5e5dc8c992fccdbc3709799449

    • SSDEEP

      12288:7Os17OgXMh/pz8VSgrdMxDemo+7mtih+rqG7K4HTN:7R1qgXMh6M51o+7m4Aq

    Score
    10/10
    redlinesirusinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks