Overview

overview

10

Static

static

10

0x00060000...09.exe

windows7-x64

10

0x00060000...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0006000000015dd1-209.dat

  • Size

    221KB

  • Sample

    231102-g26wwsac54

  • MD5

    d888ec4c43fca13a0e4db4bf560f2a5f

  • SHA1

    9b4a13a2ad0a5635df5313dbf0b7cec43c97e105

  • SHA256

    164fcd446672296fe19d540a31c7f96e31a09e2f39cbeba6ee2e14643d789c15

  • SHA512

    5a8125368cb2161e8dd342aa319147938ccf3b2e59ecd88ad0ba86332eebb5c24ab13461cac9d43ece89f7143127b7cb1840fec8518dedae570fd7885c0612c5

  • SSDEEP

    3072:t3zxq4nKNgcb03jq+PEQDt/q6VOu3HeBM8dtucsh:t3zxVKNgcbsjOQB/nOu3HeWetuc

Score
10/10
redlineraptainfostealer

Malware Config

Extracted

Family

redline

Botnet

rapta

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000015dd1-209.dat

    • Size

      221KB

    • MD5

      d888ec4c43fca13a0e4db4bf560f2a5f

    • SHA1

      9b4a13a2ad0a5635df5313dbf0b7cec43c97e105

    • SHA256

      164fcd446672296fe19d540a31c7f96e31a09e2f39cbeba6ee2e14643d789c15

    • SHA512

      5a8125368cb2161e8dd342aa319147938ccf3b2e59ecd88ad0ba86332eebb5c24ab13461cac9d43ece89f7143127b7cb1840fec8518dedae570fd7885c0612c5

    • SSDEEP

      3072:t3zxq4nKNgcb03jq+PEQDt/q6VOu3HeBM8dtucsh:t3zxVKNgcbsjOQB/nOu3HeWetuc

    Score
    10/10
    redlineraptainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks