Overview

overview

10

Static

static

10

0x000c0000...28.exe

windows7-x64

10

0x000c0000...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000c0000000232b1-528.dat

  • Size

    221KB

  • Sample

    231012-v88wqagh62

  • MD5

    bcc84b6ad506d30eca39d06be5290e86

  • SHA1

    924fa33a97c7cafd8811365515d363b25abf7168

  • SHA256

    72f62b7bb76b62907e6bdcf01feda44f54907c5ef7b6839a555d50f880fc29f3

  • SHA512

    13e730b596821e7519f56184cc67fa8b685dcf78b38f38c4c5bac7ff41ffb32fb266be7f15e98f3187091a6a27bf16757ce5bce3ed305cb6fcb4cf0b5699b25c

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10
redlinelutyrinfostealer

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Targets

    • Target

      0x000c0000000232b1-528.dat

    • Size

      221KB

    • MD5

      bcc84b6ad506d30eca39d06be5290e86

    • SHA1

      924fa33a97c7cafd8811365515d363b25abf7168

    • SHA256

      72f62b7bb76b62907e6bdcf01feda44f54907c5ef7b6839a555d50f880fc29f3

    • SHA512

      13e730b596821e7519f56184cc67fa8b685dcf78b38f38c4c5bac7ff41ffb32fb266be7f15e98f3187091a6a27bf16757ce5bce3ed305cb6fcb4cf0b5699b25c

    • SSDEEP

      3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

    Score
    10/10
    redlinelutyrinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks