Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    221KB

  • Sample

    231014-mkqfgacd3w

  • MD5

    2b7bf7662f6eb37fa5c9b9c3472cf16a

  • SHA1

    d33fdc941adadbf99d5bdd6eef18646ebbe09913

  • SHA256

    0113366d8cbfa59c27d79a4e43096d2aaa77099e44db08bd029fce48bd13b308

  • SHA512

    14edbcb0b45cc4f32c08f44ad0afd43f99ae659edaf93ea72996ef1698d6e47566d8860700ac63163073a6e23f503b68bf05e38a32a74570ee5d1cd1a2abd8e2

  • SSDEEP

    3072:A0DenRNgcJkem8R3BykVxVju3Wrt/que+k6ARHHeM1T4sX:A0iRNgcJkD8RR7Vx5Lp/c+k6Al+M1T4

Score
10/10
redlinesq1infostealer

Malware Config

Extracted

Family

redline

Botnet

sq1

C2

185.225.74.51:44767

Targets

    • Target

      file

    • Size

      221KB

    • MD5

      2b7bf7662f6eb37fa5c9b9c3472cf16a

    • SHA1

      d33fdc941adadbf99d5bdd6eef18646ebbe09913

    • SHA256

      0113366d8cbfa59c27d79a4e43096d2aaa77099e44db08bd029fce48bd13b308

    • SHA512

      14edbcb0b45cc4f32c08f44ad0afd43f99ae659edaf93ea72996ef1698d6e47566d8860700ac63163073a6e23f503b68bf05e38a32a74570ee5d1cd1a2abd8e2

    • SSDEEP

      3072:A0DenRNgcJkem8R3BykVxVju3Wrt/que+k6ARHHeM1T4sX:A0iRNgcJkD8RR7Vx5Lp/c+k6Al+M1T4

    Score
    10/10
    redlinesq1infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks