Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e325d6a3e1868c01c9d13eca2606e7f1558f2a358f688d22e5945ed2a09027c

  • Size

    411KB

  • Sample

    230106-nx1bwabe7y

  • MD5

    612fe0f837844876e400cf283e20809a

  • SHA1

    ba18446efdf60ef28daf7e0408e33cb43917161b

  • SHA256

    8e325d6a3e1868c01c9d13eca2606e7f1558f2a358f688d22e5945ed2a09027c

  • SHA512

    c263b21fd992b52a91300c0b6c808b9c65334712deaeb9609b5801e8c5d481dcccd238b3346021ef42456b8d6d26cb0896f19973d83087cc2c9b62654af4e3da

  • SSDEEP

    12288:UhSFVJa+szA07FbbjYENPvDZAU5bsLzoo:U0fxQA6/5NPvdAU5b0o

Score
10/10
redlinesportinfostealer

Malware Config

Extracted

Family

redline

Botnet

sport

C2

31.41.244.98:4063

Attributes
  • auth_value

    82cce55eeb56b322651e98032c09d225

Targets

    • Target

      8e325d6a3e1868c01c9d13eca2606e7f1558f2a358f688d22e5945ed2a09027c

    • Size

      411KB

    • MD5

      612fe0f837844876e400cf283e20809a

    • SHA1

      ba18446efdf60ef28daf7e0408e33cb43917161b

    • SHA256

      8e325d6a3e1868c01c9d13eca2606e7f1558f2a358f688d22e5945ed2a09027c

    • SHA512

      c263b21fd992b52a91300c0b6c808b9c65334712deaeb9609b5801e8c5d481dcccd238b3346021ef42456b8d6d26cb0896f19973d83087cc2c9b62654af4e3da

    • SSDEEP

      12288:UhSFVJa+szA07FbbjYENPvDZAU5bsLzoo:U0fxQA6/5NPvdAU5b0o

    Score
    10/10
    redlinesportinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks