Overview

overview

10

Static

static

d66061e11f...75.exe

windows7-x64

10

d66061e11f...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d66061e11f941e77c914ce427585d7fbd6a58687c00449b533a6439b15076d75

  • Size

    1.5MB

  • Sample

    230103-gc8desde5z

  • MD5

    eecabbaea447bde4abf070d0fcac1564

  • SHA1

    74b5c6c9605bf71f2763b21e5dfd864a3b70bf33

  • SHA256

    d66061e11f941e77c914ce427585d7fbd6a58687c00449b533a6439b15076d75

  • SHA512

    4b63cd051967fcb33a1ae13270bfadf4a6adaa95a5be56dce0258f1ac9a9686b0a1960ecf5bebb60cce165e32f7b56d8bc213d800aa991bd6e6c9969859b91fc

  • SSDEEP

    24576:b71YR9ep+TBP8AhBb1M/sEw1Me+BZ8G/KF0B8kdQJZerremgCjZ:q9epuNlhBhM/j7ByGyo8Zel

Score
10/10
redline1310infostealer

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Targets

    • Target

      d66061e11f941e77c914ce427585d7fbd6a58687c00449b533a6439b15076d75

    • Size

      1.5MB

    • MD5

      eecabbaea447bde4abf070d0fcac1564

    • SHA1

      74b5c6c9605bf71f2763b21e5dfd864a3b70bf33

    • SHA256

      d66061e11f941e77c914ce427585d7fbd6a58687c00449b533a6439b15076d75

    • SHA512

      4b63cd051967fcb33a1ae13270bfadf4a6adaa95a5be56dce0258f1ac9a9686b0a1960ecf5bebb60cce165e32f7b56d8bc213d800aa991bd6e6c9969859b91fc

    • SSDEEP

      24576:b71YR9ep+TBP8AhBb1M/sEw1Me+BZ8G/KF0B8kdQJZerremgCjZ:q9epuNlhBhM/j7ByGyo8Zel

    Score
    10/10
    redline1310infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks