Overview

overview

10

Static

static

1

sample.exe

windows7-x64

10

sample.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    sample.exe

  • Size

    3.5MB

  • Sample

    230324-yzdwrsbc51

  • MD5

    8fab179961c660a9f679655cd794b2f8

  • SHA1

    0630c564fc7f61271ff53cbb3e4535cc7bee38b8

  • SHA256

    2eaab22ca9599f4ca8f93aa5eeb91ea6ddb38d1f45fbbd0953d19ec05eb8f433

  • SHA512

    8448850c21d5342d93e4a59d221f416cb8e82de69a24f2d95d11806ddc3866758c50d6067599ea79884d88a85a0ad5189ba4f908232b1f0f6ea998e9de6cbe40

  • SSDEEP

    49152:ks1KhR7JuiFqAbZcgFFS5jGNFGu1BjY4jE5VI6/Kn8Wl8vekIhp/JPEDe+Vn3ZnU:EhHFqNgFfOu1VY8qo8WW1ip/azYd6M

Score
10/10
redlineinfostealer

Malware Config

Extracted

Family

redline

C2

45.9.20.219:34189

Attributes
  • auth_value

    8cd9071c1cde5086bf9e52c4a65e22e0

Targets

    • Target

      sample.exe

    • Size

      3.5MB

    • MD5

      8fab179961c660a9f679655cd794b2f8

    • SHA1

      0630c564fc7f61271ff53cbb3e4535cc7bee38b8

    • SHA256

      2eaab22ca9599f4ca8f93aa5eeb91ea6ddb38d1f45fbbd0953d19ec05eb8f433

    • SHA512

      8448850c21d5342d93e4a59d221f416cb8e82de69a24f2d95d11806ddc3866758c50d6067599ea79884d88a85a0ad5189ba4f908232b1f0f6ea998e9de6cbe40

    • SSDEEP

      49152:ks1KhR7JuiFqAbZcgFFS5jGNFGu1BjY4jE5VI6/Kn8Wl8vekIhp/JPEDe+Vn3ZnU:EhHFqNgFfOu1VY8qo8WW1ip/azYd6M

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks