Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    h0745430.exe

  • Size

    174KB

  • Sample

    230919-hnq4ysfd7t

  • MD5

    b0b411456035583fa1873d9e27c80b3f

  • SHA1

    b8a0d5d8022911b28ae6caeb0470e1c2f3a8ddc0

  • SHA256

    b66a9b7940002fda2d1a3ef446c4732574d7fecf46b05211ec74c4e1b3c6a7db

  • SHA512

    e166c14008f836a73bae5be0f49e5f257b73c96878283aad034194d3cfa92783fb9ac478ff86bb6c0fd3f088200c59fdc38b1c6953229737e4f5f555141411ea

  • SSDEEP

    3072:0LNyZAaI0gjhGtO04n28qAo+71oE0Gfzj1kqvJ88e8hg:0LDaI0gjhG3Ao+ZoE0A1kqv6

Score
10/10
redlineblackinfostealer

Malware Config

Extracted

Family

redline

Botnet

black

C2

77.91.124.82:19071

Attributes
  • auth_value

    c5887216cebc5a219113738140bc3047

Targets

    • Target

      h0745430.exe

    • Size

      174KB

    • MD5

      b0b411456035583fa1873d9e27c80b3f

    • SHA1

      b8a0d5d8022911b28ae6caeb0470e1c2f3a8ddc0

    • SHA256

      b66a9b7940002fda2d1a3ef446c4732574d7fecf46b05211ec74c4e1b3c6a7db

    • SHA512

      e166c14008f836a73bae5be0f49e5f257b73c96878283aad034194d3cfa92783fb9ac478ff86bb6c0fd3f088200c59fdc38b1c6953229737e4f5f555141411ea

    • SSDEEP

      3072:0LNyZAaI0gjhGtO04n28qAo+71oE0Gfzj1kqvJ88e8hg:0LDaI0gjhG3Ao+ZoE0A1kqv6

    Score
    10/10
    redlineblackinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks