Overview

overview

10

Static

static

1

39ec013562...ed.exe

windows7-x64

10

39ec013562...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39ec013562bd764d28fc3946be960d00c4d89d05923e5a5bacb02905b7e303ed

  • Size

    359KB

  • Sample

    230406-nm5tlsef91

  • MD5

    ff8e838b39548285a0f2e9d4777c9ec0

  • SHA1

    a84c7e1a4f821cf27015137bd2c88f1f1b9d8751

  • SHA256

    39ec013562bd764d28fc3946be960d00c4d89d05923e5a5bacb02905b7e303ed

  • SHA512

    8e5f87a67e7f250282e213d251eec605ab524f0d857d5f84b8f9759083d6d0d7dd60bb0738075ec8c0ff32c0d08c9937387dc6c75833ac841daca487bec01dd1

  • SSDEEP

    6144:/nI50iLIkzSCvb63HhnRtUzLaL9v34yaiRSN4Q6dSK:w50ikk7jOHhF543jOd

Score
10/10
redlinesonyinfostealer

Malware Config

Extracted

Family

redline

Botnet

sony

C2

193.233.20.33:4125

Attributes
  • auth_value

    1d93d1744381eeb4fcfd7c23ffe0f0b4

Targets

    • Target

      39ec013562bd764d28fc3946be960d00c4d89d05923e5a5bacb02905b7e303ed

    • Size

      359KB

    • MD5

      ff8e838b39548285a0f2e9d4777c9ec0

    • SHA1

      a84c7e1a4f821cf27015137bd2c88f1f1b9d8751

    • SHA256

      39ec013562bd764d28fc3946be960d00c4d89d05923e5a5bacb02905b7e303ed

    • SHA512

      8e5f87a67e7f250282e213d251eec605ab524f0d857d5f84b8f9759083d6d0d7dd60bb0738075ec8c0ff32c0d08c9937387dc6c75833ac841daca487bec01dd1

    • SSDEEP

      6144:/nI50iLIkzSCvb63HhnRtUzLaL9v34yaiRSN4Q6dSK:w50ikk7jOHhF543jOd

    Score
    10/10
    redlinesonyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks