Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    313KB

  • Sample

    240202-wv15dsedck

  • MD5

    5a6358bb95f251ab50b99305958a4c98

  • SHA1

    c7efa3847114e6fa410c5b2d3056c052a69cda01

  • SHA256

    54b5e43af21ab13e87ff59f80a62d1703f02f53db2b43ddca2bbd6b79eb953c5

  • SHA512

    4ba31d952bffbe877a9d0d5df647e695e16166d0efe7e05e00ddb48487ab703413351a49043965d5d67ed9faca52832ed01bf9fa24d5943fd591b2d263cf05c0

  • SSDEEP

    3072:fA0/mZGN+KNxIKRPFuDt9dV8HvnqvCi6VxsFRbMRqfjDv/YUeqiOL2bBOT:DbDNlFI3au6VxsbMRqfjD4aL

Score
10/10
redline@pixelscloudinfostealer

Malware Config

Extracted

Family

redline

Botnet

@PixelsCloud

C2

94.156.67.230:13781

Targets

    • Target

      tmp

    • Size

      313KB

    • MD5

      5a6358bb95f251ab50b99305958a4c98

    • SHA1

      c7efa3847114e6fa410c5b2d3056c052a69cda01

    • SHA256

      54b5e43af21ab13e87ff59f80a62d1703f02f53db2b43ddca2bbd6b79eb953c5

    • SHA512

      4ba31d952bffbe877a9d0d5df647e695e16166d0efe7e05e00ddb48487ab703413351a49043965d5d67ed9faca52832ed01bf9fa24d5943fd591b2d263cf05c0

    • SSDEEP

      3072:fA0/mZGN+KNxIKRPFuDt9dV8HvnqvCi6VxsFRbMRqfjDv/YUeqiOL2bBOT:DbDNlFI3au6VxsbMRqfjD4aL

    Score
    10/10
    redline@pixelscloudinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks