Overview

overview

10

Static

static

1

c3bc3e8b29...61.exe

windows7-x64

10

c3bc3e8b29...61.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f912d133d6132ea163bff72ab484f11c.bin

  • Size

    307KB

  • Sample

    230206-nbtbfadf46

  • MD5

    9272e9cd8653c1c44d4457f0fa2ed72f

  • SHA1

    274257ac0af9d918a43173830a0df5144e0bde7c

  • SHA256

    3574a53de8aa43d20bd702e0738a5aaf70452c241af9a7bfc6d747da096bc3dc

  • SHA512

    8f6a5716c72c0eafa3ea03db84d7e1fead2079ecc23d431c5a925178cc659a925ff75f5a63060812b352781599d3a47d3a6f7d87c98cf75c9c23ffed69a4a37c

  • SSDEEP

    6144:jIkUMbi8PZIsnkJYBQBRJOV3ICDZU8m8CXMIYl+PBYtdyu0:EkUMu8PZbf6B3OCO+8l+5uyv

Score
10/10
redlinemilafinfostealer

Malware Config

Extracted

Family

redline

Botnet

milaf

C2

193.233.20.5:4136

Attributes
  • auth_value

    68aaee25afe3d0ae7d4db09dea02347c

Targets

    • Target

      c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe

    • Size

      425KB

    • MD5

      f912d133d6132ea163bff72ab484f11c

    • SHA1

      e1326fd027eb920e93253cc1c682af00df092a1a

    • SHA256

      c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61

    • SHA512

      375ef264bc8626456fbaa87653994295dc1fd3d955136649d154f2d1ead1a0735cc743b96e0e4cd2dc6d60d9041292608a1b8423325aa311166738452cc5076e

    • SSDEEP

      6144:fIFULM4lS9t8u9+HAndTOcFii5sHPvrZm69/CJTk637eQfnd5gWB:fIFUI4s9GQKSfyrs69CJb7d5g

    Score
    10/10
    redlinemilafinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks