Overview

overview

10

Static

static

10

0x00060000...50.exe

windows7-x64

10

0x00060000...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0006000000015c90-50.dat

  • Size

    221KB

  • Sample

    231013-p73qesbg47

  • MD5

    f7047af8f4f107355bbd21f50cfb5885

  • SHA1

    4963fe49d33fc30e3027024df444eed222bfb038

  • SHA256

    2943bf4349c6d4bd6fdb0a212641eeb470067e457a62cdf2e69178a4c350876d

  • SHA512

    de12f0817c372ab22195c4c917df2be62d95e85e1cf45fe7dd7377dcffdb4eb16887eefb23677ca13c122ac1fe0db7d945b4ea2cd0428a411a3db7161f2639be

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
redlinekukishinfostealer

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000015c90-50.dat

    • Size

      221KB

    • MD5

      f7047af8f4f107355bbd21f50cfb5885

    • SHA1

      4963fe49d33fc30e3027024df444eed222bfb038

    • SHA256

      2943bf4349c6d4bd6fdb0a212641eeb470067e457a62cdf2e69178a4c350876d

    • SHA512

      de12f0817c372ab22195c4c917df2be62d95e85e1cf45fe7dd7377dcffdb4eb16887eefb23677ca13c122ac1fe0db7d945b4ea2cd0428a411a3db7161f2639be

    • SSDEEP

      3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

    Score
    10/10
    redlinekukishinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks