Overview

overview

10

Static

static

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6aed540e0b13f3af56aa361bda06d1abd7a3af5f5abd7cf90e7a680fe652b233

  • Size

    389KB

  • Sample

    221128-1636cahb83

  • MD5

    74142a69e8bad556fc32f102d6a3ee50

  • SHA1

    38e01c34a02b253cb5981e37ceb2bf960f63a97a

  • SHA256

    6aed540e0b13f3af56aa361bda06d1abd7a3af5f5abd7cf90e7a680fe652b233

  • SHA512

    b1b94b5cfe332b1838c7e09eb53b69d9e3c4374ad58e80cf2933da86c60f00a4dba3be666e6fccfa2eebe7bbf875a165f0fc60385fddc8474ae0a3b3f94f2339

  • SSDEEP

    6144:eUrdXgO/T5x2zL0SFP4clyC+EclBAxVwNsUkHhSfbr5:eUpn/TqLvYC+BAisBH0fbr

Score
10/10
redlinenewyear2023infostealer

Malware Config

Extracted

Family

redline

Botnet

NewYear2023

C2

185.106.92.111:2510

Attributes
  • auth_value

    99e9bde3b38509ea98c3316cc27e6106

Targets

    • Target

      6aed540e0b13f3af56aa361bda06d1abd7a3af5f5abd7cf90e7a680fe652b233

    • Size

      389KB

    • MD5

      74142a69e8bad556fc32f102d6a3ee50

    • SHA1

      38e01c34a02b253cb5981e37ceb2bf960f63a97a

    • SHA256

      6aed540e0b13f3af56aa361bda06d1abd7a3af5f5abd7cf90e7a680fe652b233

    • SHA512

      b1b94b5cfe332b1838c7e09eb53b69d9e3c4374ad58e80cf2933da86c60f00a4dba3be666e6fccfa2eebe7bbf875a165f0fc60385fddc8474ae0a3b3f94f2339

    • SSDEEP

      6144:eUrdXgO/T5x2zL0SFP4clyC+EclBAxVwNsUkHhSfbr5:eUpn/TqLvYC+BAisBH0fbr

    Score
    10/10
    redlinenewyear2023infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks