Overview

overview

10

Static

static

10

NEAS.0x000...JC.exe

windows7-x64

10

NEAS.0x000...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0x000600000002329d304dat_JC.exe

  • Size

    230KB

  • Sample

    231008-rcy5vseh87

  • MD5

    049c798b05d00c4d90b5d646d05ecd7e

  • SHA1

    266eb150d6e08f72b41686d40157919a870f1ecb

  • SHA256

    64b178cb07595289635c5428720ddf354290f0272ca36b4e25cc1d1039751f51

  • SHA512

    3b8aeaf9e301e69a057443e70c02284e076f9e18286dbc4491655332136b0889eeb58da4972f0e3433bddb93b54154882b8f1413ff9ca9537fb6e93182d8fec6

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Score
10/10
redlinegigantinfostealer

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      NEAS.0x000600000002329d304dat_JC.exe

    • Size

      230KB

    • MD5

      049c798b05d00c4d90b5d646d05ecd7e

    • SHA1

      266eb150d6e08f72b41686d40157919a870f1ecb

    • SHA256

      64b178cb07595289635c5428720ddf354290f0272ca36b4e25cc1d1039751f51

    • SHA512

      3b8aeaf9e301e69a057443e70c02284e076f9e18286dbc4491655332136b0889eeb58da4972f0e3433bddb93b54154882b8f1413ff9ca9537fb6e93182d8fec6

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    Score
    10/10
    redlinegigantinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks