Overview

overview

10

Static

static

Ordurous.exe

windows7-x64

10

Ordurous.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ordurous.exe

  • Size

    537KB

  • Sample

    221214-ccd3csha74

  • MD5

    caf008515453f4d6a222c966356831eb

  • SHA1

    0496a3587fc272e8b7ebecd91aac4a10800be5c0

  • SHA256

    4b6b0a34ad73552d204aaeef9cbd0fb6dfef1029e6edec1a1788de872f4a306b

  • SHA512

    34ab48b4799d05b757a7620f15a4124edd8fe1820ba5da410d6fdded021346cb5e26dace3c760b8635071221ee8ff5d25db896f1c14e77b38233f8200afc9ae9

  • SSDEEP

    12288:ejxd4go0QkA+RJZOUA24F3CUaHgn/n3b5Y/pRESOToA:ezwkAuLrTUR/tY/pOSOTo

Score
10/10
redline2infostealer

Malware Config

Extracted

Family

redline

Botnet

2

C2

94.158.244.106:42091

Attributes
  • auth_value

    97b1012a1f2da1b5d673765c85a9d94c

Targets

    • Target

      Ordurous.exe

    • Size

      537KB

    • MD5

      caf008515453f4d6a222c966356831eb

    • SHA1

      0496a3587fc272e8b7ebecd91aac4a10800be5c0

    • SHA256

      4b6b0a34ad73552d204aaeef9cbd0fb6dfef1029e6edec1a1788de872f4a306b

    • SHA512

      34ab48b4799d05b757a7620f15a4124edd8fe1820ba5da410d6fdded021346cb5e26dace3c760b8635071221ee8ff5d25db896f1c14e77b38233f8200afc9ae9

    • SSDEEP

      12288:ejxd4go0QkA+RJZOUA24F3CUaHgn/n3b5Y/pRESOToA:ezwkAuLrTUR/tY/pOSOTo

    Score
    10/10
    redline2infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks