Overview

overview

10

Static

static

1

a4b84e177e...be.exe

windows7-x64

10

a4b84e177e...be.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e74993daa9c0dc6e2cf47f944bb23c80.bin

  • Size

    297KB

  • Sample

    230206-m1gs9sgh2s

  • MD5

    576a9cbc638c1a05e8a9d5d26647810d

  • SHA1

    d5dcdb46b22ac059b4f943f8cd4abbe473b8f882

  • SHA256

    71c8b9dc24fd0af4b73628bd9c590cda612dab644404de35b76b51e3d9091d05

  • SHA512

    7a588b0cdf404b5248bf0477f1c3d18565236e9959ac31077b5fa18c0aa6ffdced9d1f20cf894f83c8a723c30f7ce624eb865d61abf767adbf9da9310c3388e0

  • SSDEEP

    6144:HWQRr4zT259oQOrtZ6hiY4xxE6n/LqGIUHzuNve4adxhL6C0hZZjQ8mW+NWhkqHE:2Dz6D2kiY4xT/LJxHz49adxhL007P

Score
10/10
redlinemilafinfostealer

Malware Config

Extracted

Family

redline

Botnet

milaf

C2

193.233.20.5:4136

Attributes
  • auth_value

    68aaee25afe3d0ae7d4db09dea02347c

Targets

    • Target

      a4b84e177edb2a3bc5755d3a1f88595d8b830f88377aa6f91f296b1b59b6aebe.exe

    • Size

      408KB

    • MD5

      e74993daa9c0dc6e2cf47f944bb23c80

    • SHA1

      20baf6fc84ec7a340d769b520367d18c60cee9a1

    • SHA256

      a4b84e177edb2a3bc5755d3a1f88595d8b830f88377aa6f91f296b1b59b6aebe

    • SHA512

      a278ce3c8e55b5d44acfe0b746b7accb09c70b453e42b8a4fc50a0a09cf187942b09b1bf5b52649f4297dd84d205926a0ddde97ca4a203609048b9e28d88c1a8

    • SSDEEP

      6144:IALYIqypOh2iD/OH1fL2xjnQpZsWkyfI9/CJTk637eQfnd5U8aWB:9EjN2HxL6TQpZpkyfI9CJb7d5W

    Score
    10/10
    redlinemilafinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks