Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    313KB

  • Sample

    240203-wftf1ahdcq

  • MD5

    6754d3c831c2392dd5a35b5768df4c37

  • SHA1

    3a1bac47966c643c1587b734f19e7963c56e8dee

  • SHA256

    715dfcd7ca54a83c37acf2e093a0c3703732b2e3fceb52fcf5037f37e333bad9

  • SHA512

    2d373f936746f2bf962dbac09779d1b7c7f93dec7d8728f2c3db8bda36da290539e49b8d3bdcbeef28ab1d6e126f8632c009f5583ebb1b2d3cba4ba18e6245dd

  • SSDEEP

    3072:QA0UpT1W+9dAoDc0ib8fy+8EnelxlmyxkMRqfjDv/YUeqiOL2bBOJ:4sHdGjb8KNxADMRqfjD4aL

Score
10/10
redline1infostealer

Malware Config

Extracted

Family

redline

Botnet

1

C2

92.222.212.74:1450

Targets

    • Target

      file

    • Size

      313KB

    • MD5

      6754d3c831c2392dd5a35b5768df4c37

    • SHA1

      3a1bac47966c643c1587b734f19e7963c56e8dee

    • SHA256

      715dfcd7ca54a83c37acf2e093a0c3703732b2e3fceb52fcf5037f37e333bad9

    • SHA512

      2d373f936746f2bf962dbac09779d1b7c7f93dec7d8728f2c3db8bda36da290539e49b8d3bdcbeef28ab1d6e126f8632c009f5583ebb1b2d3cba4ba18e6245dd

    • SSDEEP

      3072:QA0UpT1W+9dAoDc0ib8fy+8EnelxlmyxkMRqfjDv/YUeqiOL2bBOJ:4sHdGjb8KNxADMRqfjD4aL

    Score
    10/10
    redline1infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks