Overview

overview

10

Static

static

ad58cdddaa...0c.exe

windows7-x64

10

ad58cdddaa...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad58cdddaa732147848d3c5dc0e6ba560bb573f8d5430ce48fda1cabaed7300c

  • Size

    1004KB

  • Sample

    221130-q7jg8aaa8s

  • MD5

    36a142814138d3833fabda1749571fd8

  • SHA1

    3d6192913d673da7a79ef9927d76e981cf8a8fd9

  • SHA256

    ad58cdddaa732147848d3c5dc0e6ba560bb573f8d5430ce48fda1cabaed7300c

  • SHA512

    5cc5396952ec1e668a193f1d5be8d7e49331202d229a69e7634eca0f7eac5e36f281e8f7918d9e354009b0f985c5a570ec989ae9d336090c72d9750176e432e6

  • SSDEEP

    12288:D5QEFuBP+MapWUIghSp3zgdXm0Ys5AkacCWkQ+vFajOJiVwEb4SFW5NnvQqBzV:DyEsQ95F1Rz5OmwEU6W5JQqB

Score
10/10
redline11infostealer

Malware Config

Extracted

Family

redline

Botnet

11

C2

95.181.172.238:3214

Targets

    • Target

      ad58cdddaa732147848d3c5dc0e6ba560bb573f8d5430ce48fda1cabaed7300c

    • Size

      1004KB

    • MD5

      36a142814138d3833fabda1749571fd8

    • SHA1

      3d6192913d673da7a79ef9927d76e981cf8a8fd9

    • SHA256

      ad58cdddaa732147848d3c5dc0e6ba560bb573f8d5430ce48fda1cabaed7300c

    • SHA512

      5cc5396952ec1e668a193f1d5be8d7e49331202d229a69e7634eca0f7eac5e36f281e8f7918d9e354009b0f985c5a570ec989ae9d336090c72d9750176e432e6

    • SSDEEP

      12288:D5QEFuBP+MapWUIghSp3zgdXm0Ys5AkacCWkQ+vFajOJiVwEb4SFW5NnvQqBzV:DyEsQ95F1Rz5OmwEU6W5JQqB

    Score
    10/10
    redline11infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks