Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9920ba4458178bcd77697856a91ceb4f2dbf545a4da44250c1783616ec3d7596

  • Size

    354KB

  • Sample

    230731-lvt1zaeb85

  • MD5

    64a56eec7ca826937b62b9082a352f92

  • SHA1

    85d2158630963b9b5993108c63f5b724734b8357

  • SHA256

    9920ba4458178bcd77697856a91ceb4f2dbf545a4da44250c1783616ec3d7596

  • SHA512

    694fef1ce8787faa41652a4373aca47b40ecc76c371f8c1247137e6fe919460ca818bdc85eff38bab6788da242fb342bc525e9286c52a7ee970c6942b769cc08

  • SSDEEP

    6144:FFBC2h8QjnlofMdRl57AEvJgsebZFeb41vPx:F/KQjnqfMRl3eVFeOx

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      9920ba4458178bcd77697856a91ceb4f2dbf545a4da44250c1783616ec3d7596

    • Size

      354KB

    • MD5

      64a56eec7ca826937b62b9082a352f92

    • SHA1

      85d2158630963b9b5993108c63f5b724734b8357

    • SHA256

      9920ba4458178bcd77697856a91ceb4f2dbf545a4da44250c1783616ec3d7596

    • SHA512

      694fef1ce8787faa41652a4373aca47b40ecc76c371f8c1247137e6fe919460ca818bdc85eff38bab6788da242fb342bc525e9286c52a7ee970c6942b769cc08

    • SSDEEP

      6144:FFBC2h8QjnlofMdRl57AEvJgsebZFeb41vPx:F/KQjnqfMRl3eVFeOx

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks