Overview

overview

10

Static

static

3

f8.exe

windows7-x64

10

f8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8.exe

  • Size

    501KB

  • Sample

    230628-hhpzpsge83

  • MD5

    3d1d713916277876d2c623f003bc9b40

  • SHA1

    564a1c304584f1d2afde36c5d7968da217c97592

  • SHA256

    6bef0e06e4c55a6db9e294929072ef81718e57f86baa23bac45f2d5ae5d8a39a

  • SHA512

    749806c092510f27c7a0128fccea828b2fc2e33f81663be922a2e302b721e63478f03bf5fba52e9bcce989fe56d7a404d7de7eb3ae1505005615648314f0105e

  • SSDEEP

    12288:qTiZU0RzDnLvrRfRnI13mAB33Rx3w0E/a4fU:MiZHzNmRLBnRpw0Y8

Score
10/10
redline5527589964_99infostealerspyware

Malware Config

Extracted

Family

redline

Botnet

5527589964_99

C2

mm1.seirog.top:28786

Attributes
  • auth_value

    adeb66ff8715920adb0888adaec6aee7

Targets

    • Target

      f8.exe

    • Size

      501KB

    • MD5

      3d1d713916277876d2c623f003bc9b40

    • SHA1

      564a1c304584f1d2afde36c5d7968da217c97592

    • SHA256

      6bef0e06e4c55a6db9e294929072ef81718e57f86baa23bac45f2d5ae5d8a39a

    • SHA512

      749806c092510f27c7a0128fccea828b2fc2e33f81663be922a2e302b721e63478f03bf5fba52e9bcce989fe56d7a404d7de7eb3ae1505005615648314f0105e

    • SSDEEP

      12288:qTiZU0RzDnLvrRfRnI13mAB33Rx3w0E/a4fU:MiZHzNmRLBnRpw0Y8

    Score
    10/10
    redline5527589964_99infostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks