Overview

overview

10

Static

static

10

1012-123-0...ry.exe

windows7-x64

10

1012-123-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1012-123-0x0000000004910000-0x0000000004954000-memory.dmp

  • Size

    272KB

  • Sample

    230328-pndxysba28

  • MD5

    4032bb4bd49d98e27cdcd96814921525

  • SHA1

    e8a19d3a9336bc2aee32879bab1c40651a13bdb9

  • SHA256

    c7de0ae3a0a65e637376b534b625a398a21a7eb1d0f5ed41d329f03ab3f93d48

  • SHA512

    078adb8cc337f814066b89d8a4eb0697a10e140fbfd5dcd9aac4a104fa3b229687172fd89934c4f8249e4d294c95a7bbb05974152faf9884954ccdfc3e3c66cf

  • SSDEEP

    3072:/z6jYELL6VXXCG/SyVXtwkw/em3EvLc9Cao40VBaw8hUJnSVJBb7xNn2pU9f2MKm:/z6jU1KyZtwLe2EvLcSJ8hinSVJB

Score
10/10
redlinerosninfostealer

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      1012-123-0x0000000004910000-0x0000000004954000-memory.dmp

    • Size

      272KB

    • MD5

      4032bb4bd49d98e27cdcd96814921525

    • SHA1

      e8a19d3a9336bc2aee32879bab1c40651a13bdb9

    • SHA256

      c7de0ae3a0a65e637376b534b625a398a21a7eb1d0f5ed41d329f03ab3f93d48

    • SHA512

      078adb8cc337f814066b89d8a4eb0697a10e140fbfd5dcd9aac4a104fa3b229687172fd89934c4f8249e4d294c95a7bbb05974152faf9884954ccdfc3e3c66cf

    • SSDEEP

      3072:/z6jYELL6VXXCG/SyVXtwkw/em3EvLc9Cao40VBaw8hUJnSVJBb7xNn2pU9f2MKm:/z6jU1KyZtwLe2EvLcSJ8hinSVJB

    Score
    10/10
    redlinerosninfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks