Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    399KB

  • Sample

    230716-n6vsrafe6z

  • MD5

    1ceda07c0fe11c0fe4d81463b4283f7b

  • SHA1

    066a9fdcca558eb7d6eada1cab0c674a71e7a57a

  • SHA256

    5ce5071790c2e83ffc59fc291021f55f1e200bfd63033f17ed80320940f9b1a7

  • SHA512

    426932e66b97e89a7650dfb58ee37d22039079f0370c73637a7a80e163248aa081177025e8862f82f3438ef7e9882108862d3b00b7aa3309e572dbb2a1787217

  • SSDEEP

    6144:FLInPc0EragRHNOfNUNAizlQXRX3MpERFGtT:FknUfrHtOfNU1KX1Mp2FO

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      file.exe

    • Size

      399KB

    • MD5

      1ceda07c0fe11c0fe4d81463b4283f7b

    • SHA1

      066a9fdcca558eb7d6eada1cab0c674a71e7a57a

    • SHA256

      5ce5071790c2e83ffc59fc291021f55f1e200bfd63033f17ed80320940f9b1a7

    • SHA512

      426932e66b97e89a7650dfb58ee37d22039079f0370c73637a7a80e163248aa081177025e8862f82f3438ef7e9882108862d3b00b7aa3309e572dbb2a1787217

    • SSDEEP

      6144:FLInPc0EragRHNOfNUNAizlQXRX3MpERFGtT:FknUfrHtOfNU1KX1Mp2FO

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks