Overview

overview

10

Static

static

a9542676ee...20.exe

windows7-x64

10

a9542676ee...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9542676ee9a25c64a9fec1466664511f6059b51d8192025f95855b02ffe9620

  • Size

    1.5MB

  • Sample

    230103-f9shssdd61

  • MD5

    5ecd23eace00b49117b0d99a86ef57ad

  • SHA1

    7711fa1dd10e45dc2d85d2785aabd24d0fd811f3

  • SHA256

    a9542676ee9a25c64a9fec1466664511f6059b51d8192025f95855b02ffe9620

  • SHA512

    4e098d6276f5c7f04a2c9d2fa3cd06e4f28c70669d82c352a4da851b6cff66efb8a9c91fb9879c190a5f1798dcebaf7b5499dec84de7f59dc56f3f9b7d45719d

  • SSDEEP

    24576:D71YR9epjTBP84XytT3mmZiBc7OxrAZ7sDU4UDTKEtegBSyS2CmWMLBk44:C9epPNuDABWOGqIFmwepH44

Score
10/10
redline1310infostealer

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Targets

    • Target

      a9542676ee9a25c64a9fec1466664511f6059b51d8192025f95855b02ffe9620

    • Size

      1.5MB

    • MD5

      5ecd23eace00b49117b0d99a86ef57ad

    • SHA1

      7711fa1dd10e45dc2d85d2785aabd24d0fd811f3

    • SHA256

      a9542676ee9a25c64a9fec1466664511f6059b51d8192025f95855b02ffe9620

    • SHA512

      4e098d6276f5c7f04a2c9d2fa3cd06e4f28c70669d82c352a4da851b6cff66efb8a9c91fb9879c190a5f1798dcebaf7b5499dec84de7f59dc56f3f9b7d45719d

    • SSDEEP

      24576:D71YR9epjTBP84XytT3mmZiBc7OxrAZ7sDU4UDTKEtegBSyS2CmWMLBk44:C9epPNuDABWOGqIFmwepH44

    Score
    10/10
    redline1310infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks