Overview

overview

10

Static

static

10

0x00080000...16.exe

windows7-x64

10

0x00080000...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00080000000122df-116.dat

  • Size

    145KB

  • Sample

    230523-fk1swaeg21

  • MD5

    a3f5f226b120bb865aac865f1f10b05b

  • SHA1

    ff42f4fa5fa103a08626479d25252e6782b1691d

  • SHA256

    190f5735783c627f56f925dd4ce7200ef35e2223e013c663d263dbbdb57c3b5a

  • SHA512

    1b1119d5b024b2e1a883cf6a1c816cb7bede6e22eeebab1a1889e9d018b42f3311543cb42a8f12ab3666552befaebe70f7f34c443cb21f6d8e2533882fad49b7

  • SSDEEP

    3072:FV+m5chQmRSZkJaj+5oxvtXwkXh0Za8e8hM:FjE1GnRXh0Q

Score
10/10
redlinedereninfostealer

Malware Config

Extracted

Family

redline

Botnet

deren

C2

77.91.68.253:19065

Attributes
  • auth_value

    04a169f1fb198bfbeca74d0e06ea2d54

Targets

    • Target

      0x00080000000122df-116.dat

    • Size

      145KB

    • MD5

      a3f5f226b120bb865aac865f1f10b05b

    • SHA1

      ff42f4fa5fa103a08626479d25252e6782b1691d

    • SHA256

      190f5735783c627f56f925dd4ce7200ef35e2223e013c663d263dbbdb57c3b5a

    • SHA512

      1b1119d5b024b2e1a883cf6a1c816cb7bede6e22eeebab1a1889e9d018b42f3311543cb42a8f12ab3666552befaebe70f7f34c443cb21f6d8e2533882fad49b7

    • SSDEEP

      3072:FV+m5chQmRSZkJaj+5oxvtXwkXh0Za8e8hM:FjE1GnRXh0Q

    Score
    10/10
    redlinedereninfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks