Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    178bd43635464ebf5d4e3f3f7f7de8515d6a8659118c3276ae2c6281c5e14f05

  • Size

    359KB

  • Sample

    230731-y1bsssbh6s

  • MD5

    1fc4667f3197358f70826b21f7bab842

  • SHA1

    391e086ab1b76425edb59ca2cf2ab6be98df9fbc

  • SHA256

    178bd43635464ebf5d4e3f3f7f7de8515d6a8659118c3276ae2c6281c5e14f05

  • SHA512

    be1d0743e111be3feb790a252478159d949c5eab1e70fdcd2ed8718204dd9b9a92acdb64045c25e2a5e1d722d59b62d9649a75d1260a552f35ab113c4659948f

  • SSDEEP

    6144:yF5nM1F4U5w2aQMHm/+VvkwPlKiP+UH5VQ:y2CU5w24H6vwPwiP+UH5

Score
10/10
redline@germanyinfostealer

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      178bd43635464ebf5d4e3f3f7f7de8515d6a8659118c3276ae2c6281c5e14f05

    • Size

      359KB

    • MD5

      1fc4667f3197358f70826b21f7bab842

    • SHA1

      391e086ab1b76425edb59ca2cf2ab6be98df9fbc

    • SHA256

      178bd43635464ebf5d4e3f3f7f7de8515d6a8659118c3276ae2c6281c5e14f05

    • SHA512

      be1d0743e111be3feb790a252478159d949c5eab1e70fdcd2ed8718204dd9b9a92acdb64045c25e2a5e1d722d59b62d9649a75d1260a552f35ab113c4659948f

    • SSDEEP

      6144:yF5nM1F4U5w2aQMHm/+VvkwPlKiP+UH5VQ:y2CU5w24H6vwPwiP+UH5

    Score
    10/10
    redline@germanyinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1

MITRE ATT&CK Matrix

Tasks