Overview

overview

10

Static

static

3

NEAS.78c46...80.exe

windows7-x64

10

NEAS.78c46...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.78c46944509a8066f0814bd4c7c74080.exe

  • Size

    1.1MB

  • Sample

    231102-t89btabb44

  • MD5

    78c46944509a8066f0814bd4c7c74080

  • SHA1

    954548896683f21910c8239c8ac1a9291ccb38fd

  • SHA256

    554265f89e56605774abaa30b1892f65c8338b5584f884be21b527303397b6f8

  • SHA512

    35316e099761894b68fbafaf96a0292d10632d4d354af6d088732db39fb6dc75c881c5b011181048794d010aad4fae63c92e33ca54ae3dec235be85af3601138

  • SSDEEP

    12288:7C9oTgzcMa29AS087kHCqZfjIR+LbUjZAkEuWSeC20455zCDrV2IS04nw1KK:7lEza29AX87kHCs8R+vuU3tIrVInw1

Score
10/10
redlinegromeinfostealer

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Targets

    • Target

      NEAS.78c46944509a8066f0814bd4c7c74080.exe

    • Size

      1.1MB

    • MD5

      78c46944509a8066f0814bd4c7c74080

    • SHA1

      954548896683f21910c8239c8ac1a9291ccb38fd

    • SHA256

      554265f89e56605774abaa30b1892f65c8338b5584f884be21b527303397b6f8

    • SHA512

      35316e099761894b68fbafaf96a0292d10632d4d354af6d088732db39fb6dc75c881c5b011181048794d010aad4fae63c92e33ca54ae3dec235be85af3601138

    • SSDEEP

      12288:7C9oTgzcMa29AS087kHCqZfjIR+LbUjZAkEuWSeC20455zCDrV2IS04nw1KK:7lEza29AX87kHCs8R+vuU3tIrVInw1

    Score
    10/10
    redlinegromeinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks