Overview

overview

10

Static

static

10

1828-8-0x0...ry.exe

windows7-x64

10

1828-8-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1828-8-0x0000000004640000-0x0000000004674000-memory.dmp

  • Size

    208KB

  • Sample

    231113-z53yhsfe86

  • MD5

    dfba94f9782eb4d40adee31282892c99

  • SHA1

    829886ff8a1e6481d78eeb1328a0cf57424f12b6

  • SHA256

    4ece0dd4c6827807a937a7ef653c33889e70e59f77b3ea33ef3e2ec1921265c0

  • SHA512

    0f3b1356aee93b89d51226dc6663a46068b24c88267567dda8ba0b9dc448d7c3133f43306f897a3f58357be6a43b065121e2628edd6429253e56a51c355b2d63

  • SSDEEP

    3072:5ugHUdvRR3idoTtaC0FTwu65wNP/lR20DvRQh/qrIz/Q:ccUHdTUC0po5unpQhf

Score
10/10
redline20220825infostealer

Malware Config

Extracted

Family

redline

Botnet

20220825

C2

80.87.192.249:16640

Attributes
  • auth_value

    27aa40395151b318c78ecf2834d1a5a0

Targets

    • Target

      1828-8-0x0000000004640000-0x0000000004674000-memory.dmp

    • Size

      208KB

    • MD5

      dfba94f9782eb4d40adee31282892c99

    • SHA1

      829886ff8a1e6481d78eeb1328a0cf57424f12b6

    • SHA256

      4ece0dd4c6827807a937a7ef653c33889e70e59f77b3ea33ef3e2ec1921265c0

    • SHA512

      0f3b1356aee93b89d51226dc6663a46068b24c88267567dda8ba0b9dc448d7c3133f43306f897a3f58357be6a43b065121e2628edd6429253e56a51c355b2d63

    • SSDEEP

      3072:5ugHUdvRR3idoTtaC0FTwu65wNP/lR20DvRQh/qrIz/Q:ccUHdTUC0po5unpQhf

    Score
    10/10
    redline20220825infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks