Overview

overview

10

Static

static

a9d8b0c486...f2.exe

windows7-x64

10

a9d8b0c486...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9d8b0c4864b446bec6aa42fb89a53f3df431abf36e678dda594d07a30aae3f2

  • Size

    1.4MB

  • Sample

    230103-f9tqvsdd7s

  • MD5

    af63db939066f6a4c62835d3232b2a0a

  • SHA1

    395100cc1d417a241d1dacf5305a23e2f2d672f1

  • SHA256

    a9d8b0c4864b446bec6aa42fb89a53f3df431abf36e678dda594d07a30aae3f2

  • SHA512

    4f847c31659119a6ddaefb196ffc12a3ad562b49baedf28fbd5bb14829e16b399064c9700ec68cedc627cad9b08115ec301c6650c5a98d6780c9d71346f305e6

  • SSDEEP

    24576:H71YR9epATBP8g4LStNvSycFM+sAfe4QnVjG4BUKMEQNE6fQGpXkdjmtd3JeLpw:m9epENiwvXcmUzQnVZ+RXkUtdwLpw

Score
10/10
redline1310infostealer

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Targets

    • Target

      a9d8b0c4864b446bec6aa42fb89a53f3df431abf36e678dda594d07a30aae3f2

    • Size

      1.4MB

    • MD5

      af63db939066f6a4c62835d3232b2a0a

    • SHA1

      395100cc1d417a241d1dacf5305a23e2f2d672f1

    • SHA256

      a9d8b0c4864b446bec6aa42fb89a53f3df431abf36e678dda594d07a30aae3f2

    • SHA512

      4f847c31659119a6ddaefb196ffc12a3ad562b49baedf28fbd5bb14829e16b399064c9700ec68cedc627cad9b08115ec301c6650c5a98d6780c9d71346f305e6

    • SSDEEP

      24576:H71YR9epATBP8g4LStNvSycFM+sAfe4QnVjG4BUKMEQNE6fQGpXkdjmtd3JeLpw:m9epENiwvXcmUzQnVZ+RXkUtdwLpw

    Score
    10/10
    redline1310infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks