Overview

overview

10

Static

static

10

0x00060000...17.exe

windows7-x64

10

0x00060000...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0006000000015eb8-117.dat

  • Size

    219KB

  • Sample

    231103-w37l5sgc4y

  • MD5

    ff32e77e92b4b99754a300a752000f3c

  • SHA1

    631c7effe0b9613f7ea1bfc7562b8cd0e86d08ca

  • SHA256

    3dea280bdc05b1a9acb098a8de440ad894b6f8b6083e21a65947adbb8081bbeb

  • SHA512

    54bac22b9a9dbada808b2c9bbfc6bfc9925bcc8ffe3d835bdab4e5706a3cb2c99005ac5cc595862bb81117a4d762c8287f634560bd878ddf237f7e6c919840ae

  • SSDEEP

    6144:neT7M7zNgcEgkrbVNurQ+9/Ac0NV1SE561FJ:QCNgcEjryV4cA561FJ

Score
10/10
redlinekedruinfostealer

Malware Config

Extracted

Family

redline

Botnet

kedru

C2

77.91.124.86:19084

Targets

    • Target

      0x0006000000015eb8-117.dat

    • Size

      219KB

    • MD5

      ff32e77e92b4b99754a300a752000f3c

    • SHA1

      631c7effe0b9613f7ea1bfc7562b8cd0e86d08ca

    • SHA256

      3dea280bdc05b1a9acb098a8de440ad894b6f8b6083e21a65947adbb8081bbeb

    • SHA512

      54bac22b9a9dbada808b2c9bbfc6bfc9925bcc8ffe3d835bdab4e5706a3cb2c99005ac5cc595862bb81117a4d762c8287f634560bd878ddf237f7e6c919840ae

    • SSDEEP

      6144:neT7M7zNgcEgkrbVNurQ+9/Ac0NV1SE561FJ:QCNgcEjryV4cA561FJ

    Score
    10/10
    redlinekedruinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks