Overview

overview

10

Static

static

10

1168-84-0x...ry.exe

windows7-x64

10

1168-84-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1168-84-0x00000000031A0000-0x00000000031E4000-memory.dmp

  • Size

    272KB

  • Sample

    240302-msfagace5x

  • MD5

    f0b31df47de44fb63e90c2a1f3898751

  • SHA1

    af5e08d3821969e101b8f1a04d4dfecf65ea4e91

  • SHA256

    5c928ed87ce8957563fefce1edfec5ea1dc0f967c505baf5174e5ed88555e98a

  • SHA512

    3b8d4da68fb6b3e4552af0d6db1f4e1aacd200a0ac87253493d8e473da98b31863864f586506e55d6bb357aa875eda7ecccc007485c4dc988f8f7e0b8c16251e

  • SSDEEP

    3072:V6jgELP6F6DCnuYFQB+e/ewGsvLS9Eo4012OChcTn1Xz4xNn2pU9f2MKTV/wi4lm:V6jQyYgne1svLSfCh8n1X

Score
10/10
redlinefudinfostealer

Malware Config

Extracted

Family

redline

Botnet

fud

C2

193.233.20.27:4123

Attributes
  • auth_value

    cddc991efd6918ad5321d80dac884b40

Targets

    • Target

      1168-84-0x00000000031A0000-0x00000000031E4000-memory.dmp

    • Size

      272KB

    • MD5

      f0b31df47de44fb63e90c2a1f3898751

    • SHA1

      af5e08d3821969e101b8f1a04d4dfecf65ea4e91

    • SHA256

      5c928ed87ce8957563fefce1edfec5ea1dc0f967c505baf5174e5ed88555e98a

    • SHA512

      3b8d4da68fb6b3e4552af0d6db1f4e1aacd200a0ac87253493d8e473da98b31863864f586506e55d6bb357aa875eda7ecccc007485c4dc988f8f7e0b8c16251e

    • SSDEEP

      3072:V6jgELP6F6DCnuYFQB+e/ewGsvLS9Eo4012OChcTn1Xz4xNn2pU9f2MKTV/wi4lm:V6jQyYgne1svLSfCh8n1X

    Score
    10/10
    redlinefudinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks