Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd43349e1e71bf61a7f649a562daac1056c74caa3422b5bb37d7c0fb737b4422

  • Size

    353KB

  • Sample

    230324-k264fadc57

  • MD5

    5f14b01ab30b69dd0449cd949a5428a0

  • SHA1

    2829c4da80c8365b3360d9fdaf22796684742b7c

  • SHA256

    fd43349e1e71bf61a7f649a562daac1056c74caa3422b5bb37d7c0fb737b4422

  • SHA512

    71bb8cf87646329051c43a791900e73852102d99b76f42e70ff6d4917b50d6028e7f93d0e68e2053a8849b90c0d876e45588d0c28d69eebe6b9f7f27d43054b6

  • SSDEEP

    6144:TaaVst5sxh9n2kXNdbiyoJgUYCJzwLTSEYOfEj:uaVst5sHxzuVkXYOfc

Score
10/10
redlinedozkinfostealer

Malware Config

Extracted

Family

redline

Botnet

dozk

C2

91.215.85.15:25916

Attributes
  • auth_value

    9f1dc4ff242fb8b53742acae0ef96143

Targets

    • Target

      fd43349e1e71bf61a7f649a562daac1056c74caa3422b5bb37d7c0fb737b4422

    • Size

      353KB

    • MD5

      5f14b01ab30b69dd0449cd949a5428a0

    • SHA1

      2829c4da80c8365b3360d9fdaf22796684742b7c

    • SHA256

      fd43349e1e71bf61a7f649a562daac1056c74caa3422b5bb37d7c0fb737b4422

    • SHA512

      71bb8cf87646329051c43a791900e73852102d99b76f42e70ff6d4917b50d6028e7f93d0e68e2053a8849b90c0d876e45588d0c28d69eebe6b9f7f27d43054b6

    • SSDEEP

      6144:TaaVst5sxh9n2kXNdbiyoJgUYCJzwLTSEYOfEj:uaVst5sHxzuVkXYOfc

    Score
    10/10
    redlinedozkinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks