Overview

overview

10

Static

static

10

0x00060000...88.exe

windows7-x64

10

0x00060000...88.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0006000000016cfc-188.dat

  • Size

    222KB

  • Sample

    231113-lpcjqsbh7v

  • MD5

    f6deff9d0607cc3709f57e82b8751d6c

  • SHA1

    7c219e40d81ffd8ba923e8ff0c3488c9ce3220e4

  • SHA256

    f7ee194788eb76f820474674bb3b2a0c7a89406be666ce593e1bab75ea9fc639

  • SHA512

    5a2ea2b3afc80594ce4ed5d2c825b73e3c368816f931841f896a5dc4e70fe22f620072941912c59e36d907f12418c9ecaec93f5eef790532f03aea2eacc55cfe

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10
redlinekinzainfostealer

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Targets

    • Target

      0x0006000000016cfc-188.dat

    • Size

      222KB

    • MD5

      f6deff9d0607cc3709f57e82b8751d6c

    • SHA1

      7c219e40d81ffd8ba923e8ff0c3488c9ce3220e4

    • SHA256

      f7ee194788eb76f820474674bb3b2a0c7a89406be666ce593e1bab75ea9fc639

    • SHA512

      5a2ea2b3afc80594ce4ed5d2c825b73e3c368816f931841f896a5dc4e70fe22f620072941912c59e36d907f12418c9ecaec93f5eef790532f03aea2eacc55cfe

    • SSDEEP

      6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

    Score
    10/10
    redlinekinzainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks