Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44c1fc15d52dbbaafe02d7ae6d239b9beac57c9064a08bd6a1abdb49d3439421

  • Size

    316KB

  • Sample

    230730-traf6aah81

  • MD5

    235ea6ef954e6c75992bfdaabdc8cace

  • SHA1

    8fc3939f9cbc65def18e4be0755dd9237e5ec088

  • SHA256

    44c1fc15d52dbbaafe02d7ae6d239b9beac57c9064a08bd6a1abdb49d3439421

  • SHA512

    bcac5ddf33c62a4cf4dbc2e0feaacd52c217d84526c07e071c0f638d15e59053e0ea3435cc087f42afb069f8f3d56af4e554921031cec3beb76e159a744a6af2

  • SSDEEP

    6144:ZmtsL1N9plZFx2dNLrviQT9ZXTQMz4h0C5Z+:LRNNZGRrcMz4h0Cb+

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      44c1fc15d52dbbaafe02d7ae6d239b9beac57c9064a08bd6a1abdb49d3439421

    • Size

      316KB

    • MD5

      235ea6ef954e6c75992bfdaabdc8cace

    • SHA1

      8fc3939f9cbc65def18e4be0755dd9237e5ec088

    • SHA256

      44c1fc15d52dbbaafe02d7ae6d239b9beac57c9064a08bd6a1abdb49d3439421

    • SHA512

      bcac5ddf33c62a4cf4dbc2e0feaacd52c217d84526c07e071c0f638d15e59053e0ea3435cc087f42afb069f8f3d56af4e554921031cec3beb76e159a744a6af2

    • SSDEEP

      6144:ZmtsL1N9plZFx2dNLrviQT9ZXTQMz4h0C5Z+:LRNNZGRrcMz4h0Cb+

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks