Overview

overview

10

Static

static

arnatic_7.exe

windows7-x64

10

arnatic_7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    arnatic_7.txt

  • Size

    378KB

  • Sample

    230118-a7e7ssbh58

  • MD5

    5632c0cda7da1c5b57aeffeead5c40b7

  • SHA1

    533805ba88fbd008457616ae2c3b585c952d3afe

  • SHA256

    2b4a3c6d5d62270440c34e1ea75ba2878523eccc4ef85692c0e9497b6f1a8f43

  • SHA512

    e86a2c0eb84b41bae94a1d29cc26c069d7ba0da8ed06f26192bd4e601b1c0168b2396734e17f585da531976125178f9a230ef7071cbd616cb070c44bcc16b990

  • SSDEEP

    3072:+L5+5Yqofb/UXdX+EioqPE056SMt2dlwMdjLubX96Tzj3ygfu6noqZV0pq8eGWRK:p5Yqofb/kbrQ6S+cDZLubN6TTVwfk6I

Score
10/10
redlinedomani2infostealer

Malware Config

Extracted

Family

redline

Botnet

DomAni2

C2

flestriche.xyz:80

Targets

    • Target

      arnatic_7.txt

    • Size

      378KB

    • MD5

      5632c0cda7da1c5b57aeffeead5c40b7

    • SHA1

      533805ba88fbd008457616ae2c3b585c952d3afe

    • SHA256

      2b4a3c6d5d62270440c34e1ea75ba2878523eccc4ef85692c0e9497b6f1a8f43

    • SHA512

      e86a2c0eb84b41bae94a1d29cc26c069d7ba0da8ed06f26192bd4e601b1c0168b2396734e17f585da531976125178f9a230ef7071cbd616cb070c44bcc16b990

    • SSDEEP

      3072:+L5+5Yqofb/UXdX+EioqPE056SMt2dlwMdjLubX96Tzj3ygfu6noqZV0pq8eGWRK:p5Yqofb/kbrQ6S+cDZLubN6TTVwfk6I

    Score
    10/10
    redlinedomani2infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks