Overview

overview

10

Static

static

10

0x00080000...16.exe

windows7-x64

10

0x00080000...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00080000000122dc-116.dat

  • Size

    145KB

  • Sample

    230515-dznqraef35

  • MD5

    265564779b7e9fdc33bd5287e0bdbeef

  • SHA1

    3fc4769be741c82a3eb77c0e4c3e34f3cc96c664

  • SHA256

    50af197b07f7004cf89e3fc1f203234901e1400eedcceb5ab9325cc961b23b0f

  • SHA512

    5c687f41b36f6ceacfd1449c7fb909fac8c082383682e0c04f20457ff8117aeafb1765d015382d1d5396ca859337f414ce754aa949be8254bef57c5a0cd9cfc8

  • SSDEEP

    3072:yV+m5cZQmRSJyq2G7z+Ued26U+QEThhZ98e8h4:yjcWnC1PCEThhH

Score
10/10
redlinelukainfostealer

Malware Config

Extracted

Family

redline

Botnet

luka

C2

185.161.248.75:4132

Attributes
  • auth_value

    44560bcd37d6bf076da309730fdb519a

Targets

    • Target

      0x00080000000122dc-116.dat

    • Size

      145KB

    • MD5

      265564779b7e9fdc33bd5287e0bdbeef

    • SHA1

      3fc4769be741c82a3eb77c0e4c3e34f3cc96c664

    • SHA256

      50af197b07f7004cf89e3fc1f203234901e1400eedcceb5ab9325cc961b23b0f

    • SHA512

      5c687f41b36f6ceacfd1449c7fb909fac8c082383682e0c04f20457ff8117aeafb1765d015382d1d5396ca859337f414ce754aa949be8254bef57c5a0cd9cfc8

    • SSDEEP

      3072:yV+m5cZQmRSJyq2G7z+Ued26U+QEThhZ98e8h4:yjcWnC1PCEThhH

    Score
    10/10
    redlinelukainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks