Overview

overview

10

Static

static

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d16d073497cf3d17e738867771235c27bebea79e9c6c945e18112e7d19069e4

  • Size

    2.4MB

  • Sample

    221101-mk6gpabghp

  • MD5

    abe80efffb239dbd2ec2dd07cba01367

  • SHA1

    907a094a62f74a6da3ea4fd02bb7baedd4dbe5cb

  • SHA256

    9d16d073497cf3d17e738867771235c27bebea79e9c6c945e18112e7d19069e4

  • SHA512

    e196482571f98c5d950a00098fb680502d10a2255ccc303fe1d1651cfde1eb19d6afe72c4c4e42eacea5fee454b2802b7d70712bc11018001f834ab3e186161a

  • SSDEEP

    24576:PK30YwYTUfeJbMGhoXDrjfshe5p5+ioIly6e6jdYQLJiLkl3RuQ55313L:PKlsppAzIly6/jdYQ1l3t

Score
10/10
redlineinfostealer

Malware Config

Extracted

Family

redline

C2

185.148.39.219:47029

Attributes
  • auth_value

    f8868787260be95572b321e957e39e5a

Targets

    • Target

      9d16d073497cf3d17e738867771235c27bebea79e9c6c945e18112e7d19069e4

    • Size

      2.4MB

    • MD5

      abe80efffb239dbd2ec2dd07cba01367

    • SHA1

      907a094a62f74a6da3ea4fd02bb7baedd4dbe5cb

    • SHA256

      9d16d073497cf3d17e738867771235c27bebea79e9c6c945e18112e7d19069e4

    • SHA512

      e196482571f98c5d950a00098fb680502d10a2255ccc303fe1d1651cfde1eb19d6afe72c4c4e42eacea5fee454b2802b7d70712bc11018001f834ab3e186161a

    • SSDEEP

      24576:PK30YwYTUfeJbMGhoXDrjfshe5p5+ioIly6e6jdYQLJiLkl3RuQ55313L:PKlsppAzIly6/jdYQ1l3t

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks