Overview

overview

10

Static

static

7c79767f07...6f.exe

windows7-x64

10

7c79767f07...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c79767f070899d102d6f20dd4aab76f.exe

  • Size

    398KB

  • Sample

    221225-j8z32aed8t

  • MD5

    7c79767f070899d102d6f20dd4aab76f

  • SHA1

    2d520306e1edcd13b37e12eceedf261f5c15abcd

  • SHA256

    7f11a927ac9742f5b53973e5a198044f52c11af540c028ba81bf1b93ecdff4f0

  • SHA512

    51e09617aa0c026677542f3bb10753b6a8ac8cef01e2c5cb0fceabf2a6563ffac3c56d9b1a923b5945de55e3f34d8888b8ed36a225b28b14e2e98b9eace3895c

  • SSDEEP

    12288:2ygxer6dluLigEZoNZaZDhm8aAxHsyKP7:QuOdZ6ZyA8aAxHsp7

Score
10/10
redline11infostealerspyware

Malware Config

Extracted

Family

redline

Botnet

11

C2

79.137.202.18:45218

Attributes
  • auth_value

    107e09eee63158d2488feb03dac75204

Targets

    • Target

      7c79767f070899d102d6f20dd4aab76f.exe

    • Size

      398KB

    • MD5

      7c79767f070899d102d6f20dd4aab76f

    • SHA1

      2d520306e1edcd13b37e12eceedf261f5c15abcd

    • SHA256

      7f11a927ac9742f5b53973e5a198044f52c11af540c028ba81bf1b93ecdff4f0

    • SHA512

      51e09617aa0c026677542f3bb10753b6a8ac8cef01e2c5cb0fceabf2a6563ffac3c56d9b1a923b5945de55e3f34d8888b8ed36a225b28b14e2e98b9eace3895c

    • SSDEEP

      12288:2ygxer6dluLigEZoNZaZDhm8aAxHsyKP7:QuOdZ6ZyA8aAxHsp7

    Score
    10/10
    redline11infostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scripting

1
T1064

Persistence

Privilege Escalation

Defense Evasion

Scripting

1
T1064

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks