Overview

overview

10

Static

static

malware_sm...68.exe

windows7-x64

10

malware_sm...68.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    malware_smoke_2863494568

  • Size

    390KB

  • Sample

    221004-mztrfaahhj

  • MD5

    f469c429bc85316504852d4269feb67d

  • SHA1

    b719950b0153fed0ae0b99a6890ee9b3d399e3b2

  • SHA256

    2e9f70c7accf941ffedd969e47a61c6157b15721a9e1b059481f52ff5fa95e5e

  • SHA512

    66ed6cbd79dcd7d480d1fa00530a3b3f244065107f9a46e99a06b99d4402e98de452da47ad5eae50c08812d7d140a6d43c55ce7a25fcc2993476e09e66b31fee

  • SSDEEP

    6144:Xg8xntSbY1vMOot8waNsYzEULBalVj6nJL/A818lNf4hz+Ln:Q83SbY1vMOot8xtzEULBAgJzF+L

Score
10/10
redline170infostealer

Malware Config

Extracted

Family

redline

Botnet

170

C2

193.106.191.196:44310

Attributes
  • auth_value

    53e4e07dd3f74dc02e33a316c82edf3d

Targets

    • Target

      malware_smoke_2863494568

    • Size

      390KB

    • MD5

      f469c429bc85316504852d4269feb67d

    • SHA1

      b719950b0153fed0ae0b99a6890ee9b3d399e3b2

    • SHA256

      2e9f70c7accf941ffedd969e47a61c6157b15721a9e1b059481f52ff5fa95e5e

    • SHA512

      66ed6cbd79dcd7d480d1fa00530a3b3f244065107f9a46e99a06b99d4402e98de452da47ad5eae50c08812d7d140a6d43c55ce7a25fcc2993476e09e66b31fee

    • SSDEEP

      6144:Xg8xntSbY1vMOot8waNsYzEULBalVj6nJL/A818lNf4hz+Ln:Q83SbY1vMOot8xtzEULBAgJzF+L

    Score
    10/10
    redline170infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks