Overview

overview

10

Static

static

10

build.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    build.exe

  • Size

    95KB

  • Sample

    221225-xhlplsfb3z

  • MD5

    f4ef36e8f39f1c3254df819ab9cfc869

  • SHA1

    841710d483772767e398e54c6f9c59b91f78c247

  • SHA256

    c42482556527f91d6052a9bf246c343b3ba6431371219a0154d07ed727a8e67a

  • SHA512

    3314f16687204ff2a71e25b502c15e96ff152d199d81b66007ebc198c987192070bc0eedfb8a82a7ef82e567ab1ae442c98638ec8778a1c5fe39f7848f7ca968

  • SSDEEP

    1536:9qsIXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2ftmulgS6pY:rWgzWHY3+zi0ZbYe1g0ujyzdnY

Score
10/10
redline1877infostealer

Malware Config

Extracted

Family

redline

Botnet

1877

C2

5.206.227.115 :1337

Targets

    • Target

      build.exe

    • Size

      95KB

    • MD5

      f4ef36e8f39f1c3254df819ab9cfc869

    • SHA1

      841710d483772767e398e54c6f9c59b91f78c247

    • SHA256

      c42482556527f91d6052a9bf246c343b3ba6431371219a0154d07ed727a8e67a

    • SHA512

      3314f16687204ff2a71e25b502c15e96ff152d199d81b66007ebc198c987192070bc0eedfb8a82a7ef82e567ab1ae442c98638ec8778a1c5fe39f7848f7ca968

    • SSDEEP

      1536:9qsIXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2ftmulgS6pY:rWgzWHY3+zi0ZbYe1g0ujyzdnY

    Score
    10/10
    redline1877infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks