Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fe01bfa16b11f8da629cb9f81f1ab2c908cd13182fda676ffe94fb05339527c

  • Size

    355KB

  • Sample

    230731-fd7mvacf38

  • MD5

    c0c59100a1758ae1f1b9b932fc2120b9

  • SHA1

    99bc81ed9005a0b5710c6d4bf32feb0264c17e5b

  • SHA256

    2fe01bfa16b11f8da629cb9f81f1ab2c908cd13182fda676ffe94fb05339527c

  • SHA512

    317883164bd61aedbace5c886dfb9a41f48e16e047391a09a0411b9911e4396df9556bf6ff54a9d6a1a865d72de356db5ac95508a3beb0a602ff556a396b1245

  • SSDEEP

    6144:oFX/28hAX4Vb4CC7Wv8frji7Qv+A4zAuk:oI6AX4t4PC06N

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      2fe01bfa16b11f8da629cb9f81f1ab2c908cd13182fda676ffe94fb05339527c

    • Size

      355KB

    • MD5

      c0c59100a1758ae1f1b9b932fc2120b9

    • SHA1

      99bc81ed9005a0b5710c6d4bf32feb0264c17e5b

    • SHA256

      2fe01bfa16b11f8da629cb9f81f1ab2c908cd13182fda676ffe94fb05339527c

    • SHA512

      317883164bd61aedbace5c886dfb9a41f48e16e047391a09a0411b9911e4396df9556bf6ff54a9d6a1a865d72de356db5ac95508a3beb0a602ff556a396b1245

    • SSDEEP

      6144:oFX/28hAX4Vb4CC7Wv8frji7Qv+A4zAuk:oI6AX4t4PC06N

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks