Overview

overview

10

Static

static

dfa34a9fd8...ba.exe

windows7-x64

10

dfa34a9fd8...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfa34a9fd817fd51a614eacb4f4b7004dcb1fa994d3a290e5a2c5f76947f7eba

  • Size

    1.4MB

  • Sample

    230103-gdxy3sde7t

  • MD5

    8f727c638b885113a995f3b48ed0e283

  • SHA1

    6f7553f497e8134f6b94aadbce5190ff6282eb81

  • SHA256

    dfa34a9fd817fd51a614eacb4f4b7004dcb1fa994d3a290e5a2c5f76947f7eba

  • SHA512

    c84ae574ea69b42a3b45f03ec4a6d697ae5496f0479f8b16447ada2e0cc32da22e27e3688a454b06c49d978940a53eedc0e17d05584c4b6551b0603620897da4

  • SSDEEP

    24576:i71YR9ep2TBP8znrGqLxkMqEWIMmAui82CwZm7QRMB9+y7efXkbSGA:N9epWNG3xkMqE9Mm2g7QRAQbvkbw

Score
10/10
redline1310infostealer

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Targets

    • Target

      dfa34a9fd817fd51a614eacb4f4b7004dcb1fa994d3a290e5a2c5f76947f7eba

    • Size

      1.4MB

    • MD5

      8f727c638b885113a995f3b48ed0e283

    • SHA1

      6f7553f497e8134f6b94aadbce5190ff6282eb81

    • SHA256

      dfa34a9fd817fd51a614eacb4f4b7004dcb1fa994d3a290e5a2c5f76947f7eba

    • SHA512

      c84ae574ea69b42a3b45f03ec4a6d697ae5496f0479f8b16447ada2e0cc32da22e27e3688a454b06c49d978940a53eedc0e17d05584c4b6551b0603620897da4

    • SSDEEP

      24576:i71YR9ep2TBP8znrGqLxkMqEWIMmAui82CwZm7QRMB9+y7efXkbSGA:N9epWNG3xkMqE9Mm2g7QRAQbvkbw

    Score
    10/10
    redline1310infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks