Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    564229ea3f759e8a0b7bfc113a18dd9055074919b6ecfe01af101d666b80fe49

  • Size

    314KB

  • Sample

    230730-bcd7pagc9x

  • MD5

    97d01427d9b23323521158ed518fe29d

  • SHA1

    14ae5f6447945d53b39dc420a870c2714186c38b

  • SHA256

    564229ea3f759e8a0b7bfc113a18dd9055074919b6ecfe01af101d666b80fe49

  • SHA512

    03a701119acec562ee36193c3b685a38053b9f5b8f99508be4450d353e12ff8fc4a1ec3ab71fa31e5b76e8bbe4bfebb895301c26210b2fc97804395f0fc3c56c

  • SSDEEP

    6144:kLpbJKrIXJFdoA9o89DvhqHB7R3vLzxJI+Mgvp:k9+0JFbT7hmvxJIp8p

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      564229ea3f759e8a0b7bfc113a18dd9055074919b6ecfe01af101d666b80fe49

    • Size

      314KB

    • MD5

      97d01427d9b23323521158ed518fe29d

    • SHA1

      14ae5f6447945d53b39dc420a870c2714186c38b

    • SHA256

      564229ea3f759e8a0b7bfc113a18dd9055074919b6ecfe01af101d666b80fe49

    • SHA512

      03a701119acec562ee36193c3b685a38053b9f5b8f99508be4450d353e12ff8fc4a1ec3ab71fa31e5b76e8bbe4bfebb895301c26210b2fc97804395f0fc3c56c

    • SSDEEP

      6144:kLpbJKrIXJFdoA9o89DvhqHB7R3vLzxJI+Mgvp:k9+0JFbT7hmvxJIp8p

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks