Overview

overview

10

Static

static

10

0x00090000...80.exe

windows7-x64

10

0x00090000...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0009000000012310-2180.dat

  • Size

    169KB

  • Sample

    240304-ql5hkabb81

  • MD5

    462beeab9061e51943b31766ffd8a055

  • SHA1

    44bd18f643d039f1a297a166e7b8bf41e1d03445

  • SHA256

    ed3aa9c4d7cebb184833f86c24380eba3ba7fd0c2abc2ea6e98e626883ff1fda

  • SHA512

    2ac11807bc6d4737ff63c2397fc7c36e2f81e3dccd1789acfe801b034690da41417cd45298a1b4b482186d81377441d464348bf9678983b9281eef9e4c2e74ba

  • SSDEEP

    1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

Score
10/10
redlinedizainfostealer

Malware Config

Extracted

Family

redline

Botnet

diza

C2

77.91.124.145:4125

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Targets

    • Target

      0x0009000000012310-2180.dat

    • Size

      169KB

    • MD5

      462beeab9061e51943b31766ffd8a055

    • SHA1

      44bd18f643d039f1a297a166e7b8bf41e1d03445

    • SHA256

      ed3aa9c4d7cebb184833f86c24380eba3ba7fd0c2abc2ea6e98e626883ff1fda

    • SHA512

      2ac11807bc6d4737ff63c2397fc7c36e2f81e3dccd1789acfe801b034690da41417cd45298a1b4b482186d81377441d464348bf9678983b9281eef9e4c2e74ba

    • SSDEEP

      1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

    Score
    10/10
    redlinedizainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks