Overview

overview

10

Static

static

10

0x00060000...27.exe

windows7-x64

10

0x00060000...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000600000002314b-2127.dat

  • Size

    176KB

  • Sample

    240304-gkrewacd67

  • MD5

    3e40aeb98b3adc8f32c4680898a612d0

  • SHA1

    ceaec19a972ffcb9d8390748bd20b839def6a8fa

  • SHA256

    846a40205eab9eb9a7b40ed94a96e90b80655436b0208a925f133a7dd78b7536

  • SHA512

    48ab77b0289fe73ca5d2b1b3e50511bc3a6712e7d72ade14a9698ff0e7de8fdd5b076c6c74280afb5f5ade4af6900b1a8a61cf7e82ec14c66590b1a08cfb3d08

  • SSDEEP

    3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

Score
10/10
redlinesporainfostealer

Malware Config

Extracted

Family

redline

Botnet

spora

C2

176.113.115.145:4125

Attributes
  • auth_value

    441b39ab37774b2ca9931c31e1bc6071

Targets

    • Target

      0x000600000002314b-2127.dat

    • Size

      176KB

    • MD5

      3e40aeb98b3adc8f32c4680898a612d0

    • SHA1

      ceaec19a972ffcb9d8390748bd20b839def6a8fa

    • SHA256

      846a40205eab9eb9a7b40ed94a96e90b80655436b0208a925f133a7dd78b7536

    • SHA512

      48ab77b0289fe73ca5d2b1b3e50511bc3a6712e7d72ade14a9698ff0e7de8fdd5b076c6c74280afb5f5ade4af6900b1a8a61cf7e82ec14c66590b1a08cfb3d08

    • SSDEEP

      3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

    Score
    10/10
    redlinesporainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks