Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    1.2MB

  • Sample

    231011-vc8wvaag3z

  • MD5

    6572806ffae09c8c40ae5c09e655e32b

  • SHA1

    d3d8d27882407f4a87fd1de1cadf73619b43cf49

  • SHA256

    cdddecd9cdc45e16119dd3c20a02e8b164ca9ab59aeee93173c969fb27a45c28

  • SHA512

    20f99f12eb2fb616effcfeaa4d2bbee34d329da41cc152af4444870daf2a8d95cedd5c62c6def641c3316188a05dc7ac24f6822d2c9d3265084a7f2cd4c9fd52

  • SSDEEP

    24576:pHgryc7xvgf9X3fDX7Rk4OUjWyb1Nzd3CFo7nE:Uxvgf9X3Rk4O2Wyb1dd3CFunE

Score
10/10
redlineunique28.5infostealerspyware

Malware Config

Extracted

Family

redline

Botnet

unique28.5

C2

194.169.175.232:45451

Targets

    • Target

      file

    • Size

      1.2MB

    • MD5

      6572806ffae09c8c40ae5c09e655e32b

    • SHA1

      d3d8d27882407f4a87fd1de1cadf73619b43cf49

    • SHA256

      cdddecd9cdc45e16119dd3c20a02e8b164ca9ab59aeee93173c969fb27a45c28

    • SHA512

      20f99f12eb2fb616effcfeaa4d2bbee34d329da41cc152af4444870daf2a8d95cedd5c62c6def641c3316188a05dc7ac24f6822d2c9d3265084a7f2cd4c9fd52

    • SSDEEP

      24576:pHgryc7xvgf9X3fDX7Rk4OUjWyb1Nzd3CFo7nE:Uxvgf9X3Rk4O2Wyb1dd3CFunE

    Score
    10/10
    redlineunique28.5infostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks