Overview

overview

10

Static

static

10

2.exe

windows7-x64

10

2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2.exe

  • Size

    174KB

  • Sample

    231011-pcep4sed4s

  • MD5

    29f614a5260b0131d99cf547d638428b

  • SHA1

    ed4a9fbde6ee5941dbbdbf0657ff0d6dc8179545

  • SHA256

    062e61b266ad2888b5885f9115e363c275c461dbd4940d3ea52b3d2a12f14957

  • SHA512

    d19526c97e384e36aeb6ddafeb7cde0ce2abec160732551d6c9ce12a2ed06acfc21244f45f519dc5e2dd3cca665a6a612f59705a28e56e7e4f136903754fe069

  • SSDEEP

    3072:rygEz24UyFI06YmlHOvbmWVheJE0AWMZq/iJg8e8hz:rQztFI06YmlEMJE0Dv/iG

Score
10/10
redlinedodikinfostealer

Malware Config

Extracted

Family

redline

Botnet

Dodik

C2

62.84.98.14:8599

Attributes
  • auth_value

    377b3e8fd841293c888daf3412230c21

Targets

    • Target

      2.exe

    • Size

      174KB

    • MD5

      29f614a5260b0131d99cf547d638428b

    • SHA1

      ed4a9fbde6ee5941dbbdbf0657ff0d6dc8179545

    • SHA256

      062e61b266ad2888b5885f9115e363c275c461dbd4940d3ea52b3d2a12f14957

    • SHA512

      d19526c97e384e36aeb6ddafeb7cde0ce2abec160732551d6c9ce12a2ed06acfc21244f45f519dc5e2dd3cca665a6a612f59705a28e56e7e4f136903754fe069

    • SSDEEP

      3072:rygEz24UyFI06YmlHOvbmWVheJE0AWMZq/iJg8e8hz:rQztFI06YmlEMJE0Dv/iG

    Score
    10/10
    redlinedodikinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks