Overview

overview

10

Static

static

10

0x00070000...97.exe

windows7-x64

10

0x00070000...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00070000000126c3-997.dat

  • Size

    170KB

  • Sample

    240304-msdfwagd21

  • MD5

    c29bdfdcaaea87595db7eb1218ee9ae4

  • SHA1

    3a77eb3c3712206ea3d5357621fa3fd3a91bf2c6

  • SHA256

    9b42961f9bb397be6b579bb76df2eb64727c40eebaa2753e2a6acbfd4d3cf402

  • SHA512

    544612bc7c2936fb8146f80141c3b45c123187f36fc1492b8ee3329aff275e65ce41166eeef26d5a61e96ca2e4d153fcde2f3872e37eae6f4322324d631808a7

  • SSDEEP

    3072:zbo2i9G9tCQUqVY+FRV1Qw88GjEop8e8hb:zbo2ik9E+F9Qw88GjEop

Score
10/10
redlinezimainfostealer

Malware Config

Extracted

Family

redline

Botnet

zima

C2

176.113.115.145:4125

Attributes
  • auth_value

    2ef701d510c0d27e8a8e3270281678b1

Targets

    • Target

      0x00070000000126c3-997.dat

    • Size

      170KB

    • MD5

      c29bdfdcaaea87595db7eb1218ee9ae4

    • SHA1

      3a77eb3c3712206ea3d5357621fa3fd3a91bf2c6

    • SHA256

      9b42961f9bb397be6b579bb76df2eb64727c40eebaa2753e2a6acbfd4d3cf402

    • SHA512

      544612bc7c2936fb8146f80141c3b45c123187f36fc1492b8ee3329aff275e65ce41166eeef26d5a61e96ca2e4d153fcde2f3872e37eae6f4322324d631808a7

    • SSDEEP

      3072:zbo2i9G9tCQUqVY+FRV1Qw88GjEop8e8hb:zbo2ik9E+F9Qw88GjEop

    Score
    10/10
    redlinezimainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks