Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69a994e5ffc5ee8331cfb46f9afb6304dcc57bbe905e361c673f9a4f26f838fc

  • Size

    403KB

  • Sample

    221226-el1ntscd72

  • MD5

    85096ded58b9163ddc21460fbc98632e

  • SHA1

    aa24d8a0180423a9ee9a5c79f3f6d245cc8b3298

  • SHA256

    69a994e5ffc5ee8331cfb46f9afb6304dcc57bbe905e361c673f9a4f26f838fc

  • SHA512

    c4f2977f4787e8f7c38e81fda6808c8b7983d8d5c6e803a21414a90488bb8ced00ce9dbeae57a922afac01720448da0733aef956809b831b059b097cfd49e3a8

  • SSDEEP

    6144:T2P7Eo0YnmWe9+GC0aNCUa/0O0AOY2iTVtsuMSIIJRjN3/Sta:T2P7Eo0YnmWe9cKvZ9HLJRgE

Score
10/10
redline11infostealerspyware

Malware Config

Extracted

Family

redline

Botnet

11

C2

79.137.202.18:45218

Attributes
  • auth_value

    107e09eee63158d2488feb03dac75204

Targets

    • Target

      69a994e5ffc5ee8331cfb46f9afb6304dcc57bbe905e361c673f9a4f26f838fc

    • Size

      403KB

    • MD5

      85096ded58b9163ddc21460fbc98632e

    • SHA1

      aa24d8a0180423a9ee9a5c79f3f6d245cc8b3298

    • SHA256

      69a994e5ffc5ee8331cfb46f9afb6304dcc57bbe905e361c673f9a4f26f838fc

    • SHA512

      c4f2977f4787e8f7c38e81fda6808c8b7983d8d5c6e803a21414a90488bb8ced00ce9dbeae57a922afac01720448da0733aef956809b831b059b097cfd49e3a8

    • SSDEEP

      6144:T2P7Eo0YnmWe9+GC0aNCUa/0O0AOY2iTVtsuMSIIJRjN3/Sta:T2P7Eo0YnmWe9cKvZ9HLJRgE

    Score
    10/10
    redline11infostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Collection

Command and Control

    Credential Access

    Defense Evasion

    Discovery

      Execution

        Exfiltration

          Impact

            Initial Access

              Lateral Movement

                Persistence

                  Privilege Escalation

                    Tasks