Overview

overview

10

Static

static

10

280-139-0x...ry.exe

windows7-x64

10

280-139-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    280-139-0x0000000004730000-0x0000000004774000-memory.dmp

  • Size

    272KB

  • Sample

    240303-a2aecsbc25

  • MD5

    cb32ecfe7ff21bc25d1a9719b89a6527

  • SHA1

    6a8448558175a6ca1be4fe741ae3a2af7f4cb1e1

  • SHA256

    e70f80d604797009f62d97f3d87d8541bfc8d7514978b077bb27bf7344f121bd

  • SHA512

    644cd0d3461c77ff7b76a276281c6d7a6401eb449c34602d1b5ad026d51a39904af85edb5ff94f8fdb36da327e23f7eeebf96d3ae63d9bc936c897b8d724f309

  • SSDEEP

    3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKL:96j+GosvqFwtLo0yr3QhZnI

Score
10/10
redlinegenainfostealer

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      280-139-0x0000000004730000-0x0000000004774000-memory.dmp

    • Size

      272KB

    • MD5

      cb32ecfe7ff21bc25d1a9719b89a6527

    • SHA1

      6a8448558175a6ca1be4fe741ae3a2af7f4cb1e1

    • SHA256

      e70f80d604797009f62d97f3d87d8541bfc8d7514978b077bb27bf7344f121bd

    • SHA512

      644cd0d3461c77ff7b76a276281c6d7a6401eb449c34602d1b5ad026d51a39904af85edb5ff94f8fdb36da327e23f7eeebf96d3ae63d9bc936c897b8d724f309

    • SSDEEP

      3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKL:96j+GosvqFwtLo0yr3QhZnI

    Score
    10/10
    redlinegenainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks