Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    351KB

  • Sample

    221106-j7tvmadhdr

  • MD5

    74c777e44f694389910bf3e9b76fd95f

  • SHA1

    4fbf5d9ef3a0e889e171cf3b119c1af995b332fe

  • SHA256

    dfc12b2020fd2c48d9cb0807e63df04adc844ed35db9c6960425f1ace79d64b2

  • SHA512

    87f75420e842244e98d507a005b1b4d45802886484cfc654bd75d38ffbbfe2acdbc902a282fbb1a2524c766b73adf1712ba0fb6959a7e0dd9443adc38439ec3d

  • SSDEEP

    6144:kDquepOMzRA4LmEFwzT4w2BqAqAODk7Ua1mSgReaYo5yEl4+nK483:kDquIOMzRA4LYRtIUaiYoBQ3

Score
10/10
redline1310infostealer

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Targets

    • Target

      file.exe

    • Size

      351KB

    • MD5

      74c777e44f694389910bf3e9b76fd95f

    • SHA1

      4fbf5d9ef3a0e889e171cf3b119c1af995b332fe

    • SHA256

      dfc12b2020fd2c48d9cb0807e63df04adc844ed35db9c6960425f1ace79d64b2

    • SHA512

      87f75420e842244e98d507a005b1b4d45802886484cfc654bd75d38ffbbfe2acdbc902a282fbb1a2524c766b73adf1712ba0fb6959a7e0dd9443adc38439ec3d

    • SSDEEP

      6144:kDquepOMzRA4LmEFwzT4w2BqAqAODk7Ua1mSgReaYo5yEl4+nK483:kDquIOMzRA4LYRtIUaiYoBQ3

    Score
    10/10
    redline1310infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks