Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2515103c09ca004130f49556432ab6fb1cdb229561a3c66452c7a9b355f86eb

  • Size

    352KB

  • Sample

    230324-jz6jfsfb7s

  • MD5

    088ec2c6c302e71649f17349341649c4

  • SHA1

    75874cb4921c68434100a76d9a6e530e991b77ae

  • SHA256

    d2515103c09ca004130f49556432ab6fb1cdb229561a3c66452c7a9b355f86eb

  • SHA512

    1361bc28315bf2273ac46c165091f17f62a5337d25e61620f19bd680874c7bc6d6fc0ab74e39ef529cfc8103769b25cefb4e75eb5761cb69f03dec7f378563b0

  • SSDEEP

    6144:qGVU0hxauKZtecL3cSOADWt7alEa7N2gUSFnWFj:qGVUGYuKZok3cSOei7aH2cFnWR

Score
10/10
redlinedozkinfostealer

Malware Config

Extracted

Family

redline

Botnet

dozk

C2

91.215.85.15:25916

Attributes
  • auth_value

    9f1dc4ff242fb8b53742acae0ef96143

Targets

    • Target

      d2515103c09ca004130f49556432ab6fb1cdb229561a3c66452c7a9b355f86eb

    • Size

      352KB

    • MD5

      088ec2c6c302e71649f17349341649c4

    • SHA1

      75874cb4921c68434100a76d9a6e530e991b77ae

    • SHA256

      d2515103c09ca004130f49556432ab6fb1cdb229561a3c66452c7a9b355f86eb

    • SHA512

      1361bc28315bf2273ac46c165091f17f62a5337d25e61620f19bd680874c7bc6d6fc0ab74e39ef529cfc8103769b25cefb4e75eb5761cb69f03dec7f378563b0

    • SSDEEP

      6144:qGVU0hxauKZtecL3cSOADWt7alEa7N2gUSFnWFj:qGVUGYuKZok3cSOei7aH2cFnWR

    Score
    10/10
    redlinedozkinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks