Overview

overview

10

Static

static

3

data64_1.exe

windows7-x64

10

data64_1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    data64_1.exe

  • Size

    1021KB

  • Sample

    230630-pqxsvabe68

  • MD5

    b53bfa77e651cee7bdc9859538b03cd5

  • SHA1

    cc996b0128561987a750478a2e8168ef59f0a65f

  • SHA256

    fe1998a8b0045cb7998f23cf8c2aa6212732db275026e9927adbd991eb940acb

  • SHA512

    3ad05a6c1a07ccac7b7a40e53b5e3dd9d07820fa318bbc34ba248a524a70bf93500149ceb9abe2a929ce48291fb422c312521938d8d141cb04bd849103544bb4

  • SSDEEP

    6144:HwBjzfMAReA/SthOjcccfEaLCRixSGag4WRZgu3R:GC

Score
10/10
redlinetop1infostealer

Malware Config

Extracted

Family

redline

Botnet

top1

C2

pemararslava.xyz:80

Attributes
  • auth_value

    e3ff30d1ffe0ffdb11211b351a0179a1

Targets

    • Target

      data64_1.exe

    • Size

      1021KB

    • MD5

      b53bfa77e651cee7bdc9859538b03cd5

    • SHA1

      cc996b0128561987a750478a2e8168ef59f0a65f

    • SHA256

      fe1998a8b0045cb7998f23cf8c2aa6212732db275026e9927adbd991eb940acb

    • SHA512

      3ad05a6c1a07ccac7b7a40e53b5e3dd9d07820fa318bbc34ba248a524a70bf93500149ceb9abe2a929ce48291fb422c312521938d8d141cb04bd849103544bb4

    • SSDEEP

      6144:HwBjzfMAReA/SthOjcccfEaLCRixSGag4WRZgu3R:GC

    Score
    10/10
    redlinetop1infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks