Overview

overview

10

Static

static

1

e29c418c30...29.exe

windows7-x64

10

e29c418c30...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e29c418c30fc53f707ed4f76db5261b21458893d6bfda410265007c35933c529

  • Size

    379KB

  • Sample

    230406-nyc8qsch49

  • MD5

    eb68d581a0d9470c568d68c1dc6c457a

  • SHA1

    aa738052338a7f8515a0f0dac9f9883865c3360b

  • SHA256

    e29c418c30fc53f707ed4f76db5261b21458893d6bfda410265007c35933c529

  • SHA512

    bbb63bf1d97fe57091a7382a48f706b0763851fcc7a591c02c66ffbce66cb5b03152c34e334f0b4ac7660a09d4e6629bda1cbe8238f8c1b027ea93e7d81925ee

  • SSDEEP

    6144:xbvgogp56pv5kHidlxQTx4F97PPoFIkenFZG1nr:xTghpYpvOCVLLsZqFgr

Score
10/10
redlinesonyinfostealer

Malware Config

Extracted

Family

redline

Botnet

sony

C2

193.233.20.33:4125

Attributes
  • auth_value

    1d93d1744381eeb4fcfd7c23ffe0f0b4

Targets

    • Target

      e29c418c30fc53f707ed4f76db5261b21458893d6bfda410265007c35933c529

    • Size

      379KB

    • MD5

      eb68d581a0d9470c568d68c1dc6c457a

    • SHA1

      aa738052338a7f8515a0f0dac9f9883865c3360b

    • SHA256

      e29c418c30fc53f707ed4f76db5261b21458893d6bfda410265007c35933c529

    • SHA512

      bbb63bf1d97fe57091a7382a48f706b0763851fcc7a591c02c66ffbce66cb5b03152c34e334f0b4ac7660a09d4e6629bda1cbe8238f8c1b027ea93e7d81925ee

    • SSDEEP

      6144:xbvgogp56pv5kHidlxQTx4F97PPoFIkenFZG1nr:xTghpYpvOCVLLsZqFgr

    Score
    10/10
    redlinesonyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks