Overview

overview

10

Static

static

10

0x00060000...55.exe

windows7-x64

10

0x00060000...55.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000600000001666d-255.dat

  • Size

    221KB

  • Sample

    231102-wj3tvade3x

  • MD5

    79a249d3109cf8a9da018964003e062c

  • SHA1

    9e66ba78e1446fd4e70651f3ac08847ef8b662fb

  • SHA256

    8997a40697da530257679f230de3247edd07d20ac2d42c76482003a25b397812

  • SHA512

    b592d3ebae27fb80e8d0e7fc0227d710f5573da5d761c09b2f3d1601270b643074ec4554f5a60a1d3aa3efb407659e8156faa18128646910c5812b70b9e68e32

  • SSDEEP

    3072:+Nv0S/yQKnhNgcoVQqw5TmJOXkXt/qYJanR1TaiV0VnCkMSH:+i4y5hNgcoVQJ5n0d/tanR1aQ0VnCkM

Score
10/10
redlinekolyaninfostealer

Malware Config

Extracted

Family

redline

Botnet

kolyan

C2

77.91.124.82:19071

Targets

    • Target

      0x000600000001666d-255.dat

    • Size

      221KB

    • MD5

      79a249d3109cf8a9da018964003e062c

    • SHA1

      9e66ba78e1446fd4e70651f3ac08847ef8b662fb

    • SHA256

      8997a40697da530257679f230de3247edd07d20ac2d42c76482003a25b397812

    • SHA512

      b592d3ebae27fb80e8d0e7fc0227d710f5573da5d761c09b2f3d1601270b643074ec4554f5a60a1d3aa3efb407659e8156faa18128646910c5812b70b9e68e32

    • SSDEEP

      3072:+Nv0S/yQKnhNgcoVQqw5TmJOXkXt/qYJanR1TaiV0VnCkMSH:+i4y5hNgcoVQJ5n0d/tanR1aQ0VnCkM

    Score
    10/10
    redlinekolyaninfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks