Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e86665307cd2a4d61e36d9750d2e77db4c6898f7c3a57d01ffd1247c6b77e92

  • Size

    354KB

  • Sample

    230731-h4hshsdc24

  • MD5

    d1e61e647791bdbd00e2b1c9a58aecf4

  • SHA1

    db04776e29847d8cead945c1c530ff5a7a5e624d

  • SHA256

    8e86665307cd2a4d61e36d9750d2e77db4c6898f7c3a57d01ffd1247c6b77e92

  • SHA512

    0d292f856138ff1defa4bea7b47346c600c583680cf6d41d2a4b4cc1b54404bb7c2d6b067b111fc39f6a2e30867407f2429430c385acf9e12274161f48266783

  • SSDEEP

    6144:rFj/2M/4XnvpzZ7uFbhmELJl6JfB46037WzgkceXuBDF:rss4Xnjkbh1LJUJKV7Wz3AF

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      8e86665307cd2a4d61e36d9750d2e77db4c6898f7c3a57d01ffd1247c6b77e92

    • Size

      354KB

    • MD5

      d1e61e647791bdbd00e2b1c9a58aecf4

    • SHA1

      db04776e29847d8cead945c1c530ff5a7a5e624d

    • SHA256

      8e86665307cd2a4d61e36d9750d2e77db4c6898f7c3a57d01ffd1247c6b77e92

    • SHA512

      0d292f856138ff1defa4bea7b47346c600c583680cf6d41d2a4b4cc1b54404bb7c2d6b067b111fc39f6a2e30867407f2429430c385acf9e12274161f48266783

    • SSDEEP

      6144:rFj/2M/4XnvpzZ7uFbhmELJl6JfB46037WzgkceXuBDF:rss4Xnjkbh1LJUJKV7Wz3AF

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks