Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    330KB

  • Sample

    221117-lv3ccaab5x

  • MD5

    a7b5a6ae4bbb305bbbfe761e3b2b42a1

  • SHA1

    ca0f73dda17ae8de8cdc984bf47d2480dbb3c382

  • SHA256

    7a5638513dc1d4100a3fa051e560978668ae1f2636f874779d75d121d5eb5ba8

  • SHA512

    22ac8db15b76ad194c467b33fc02f5f2ee4bf7291257402f4b10bd7d1b7d2fcc7127a222439b2e9573d727cc211b4ba4c6aa64689bad07fbdb2e5ed55364b2b1

  • SSDEEP

    6144:+uFH77Ry0fMq7VglkyzYzV3T7rTyRCdCVqT+nPQQSLopK:+ohN1RglwR7rTqCgPfOe

Score
10/10
redlineneruzinfostealer

Malware Config

Extracted

Family

redline

Botnet

neruz

C2

193.106.191.27:47242

Attributes
  • auth_value

    0169a8759f3c9be473f782b96a6ff704

Targets

    • Target

      file.exe

    • Size

      330KB

    • MD5

      a7b5a6ae4bbb305bbbfe761e3b2b42a1

    • SHA1

      ca0f73dda17ae8de8cdc984bf47d2480dbb3c382

    • SHA256

      7a5638513dc1d4100a3fa051e560978668ae1f2636f874779d75d121d5eb5ba8

    • SHA512

      22ac8db15b76ad194c467b33fc02f5f2ee4bf7291257402f4b10bd7d1b7d2fcc7127a222439b2e9573d727cc211b4ba4c6aa64689bad07fbdb2e5ed55364b2b1

    • SSDEEP

      6144:+uFH77Ry0fMq7VglkyzYzV3T7rTyRCdCVqT+nPQQSLopK:+ohN1RglwR7rTqCgPfOe

    Score
    10/10
    redlineneruzinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks