Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    417KB

  • Sample

    230202-gmh7aaha9z

  • MD5

    4daf628da6f5b5702f4a00e81f0f20d3

  • SHA1

    152e6bfae2fc47f3e0de176b6c26906a989ba024

  • SHA256

    6c3a0bcf3bdc430a810c776661f9b8ae5b1ca4e7199e32304e310388109d82a2

  • SHA512

    60a855cfb174ceb442c81eed2650fc0c52d1c76fd036176cd1659432fee09e0cdef656c59f613cef6ec2ea47280c61162ff4ed13c40c4ab671c2db26b178dbbe

  • SSDEEP

    6144:2uLjOwNH9b90Nvr26uZYrl6wvZj+Djdr3Z+E7qokmXF9/CJTk637eQfnd5wIB:FFH26nwkr3ZpymXF9CJb7d5w

Score
10/10
redline@2023@newinfostealer

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      file

    • Size

      417KB

    • MD5

      4daf628da6f5b5702f4a00e81f0f20d3

    • SHA1

      152e6bfae2fc47f3e0de176b6c26906a989ba024

    • SHA256

      6c3a0bcf3bdc430a810c776661f9b8ae5b1ca4e7199e32304e310388109d82a2

    • SHA512

      60a855cfb174ceb442c81eed2650fc0c52d1c76fd036176cd1659432fee09e0cdef656c59f613cef6ec2ea47280c61162ff4ed13c40c4ab671c2db26b178dbbe

    • SSDEEP

      6144:2uLjOwNH9b90Nvr26uZYrl6wvZj+Djdr3Z+E7qokmXF9/CJTk637eQfnd5wIB:FFH26nwkr3ZpymXF9CJb7d5w

    Score
    10/10
    redline@2023@newinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks