Overview

overview

10

Static

static

10

0x00080000...44.exe

windows7-x64

10

0x00080000...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000800000001230c-2244.dat

  • Size

    168KB

  • Sample

    240304-wlnspsha5w

  • MD5

    b86009831e8d5622adb3766a04489563

  • SHA1

    5d3c61e02f18c0502d583580aa0e045f27bab631

  • SHA256

    c28219dacb5e54eef5877eec7e62a6d88dd5408eb2ae12157fa7fc9143c8bc0f

  • SHA512

    532fb8767aa2d6d4fe8b29ce076c4e9a39658f5539bae888f007d9d7a35680a5265d9a44b69bf052321e46808347b152f533062976c374088d844f8cae70070b

  • SSDEEP

    3072:/gU7IlKYCPqVyAcAva972RaA2uZu8e8hl:JIIneja972RaA2uZu

Score
10/10
redlinelenoxinfostealer

Malware Config

Extracted

Family

redline

Botnet

lenox

C2

77.91.124.145:4125

Attributes
  • auth_value

    a5c9c17a250a084c5fd706c1df7c2d4e

Targets

    • Target

      0x000800000001230c-2244.dat

    • Size

      168KB

    • MD5

      b86009831e8d5622adb3766a04489563

    • SHA1

      5d3c61e02f18c0502d583580aa0e045f27bab631

    • SHA256

      c28219dacb5e54eef5877eec7e62a6d88dd5408eb2ae12157fa7fc9143c8bc0f

    • SHA512

      532fb8767aa2d6d4fe8b29ce076c4e9a39658f5539bae888f007d9d7a35680a5265d9a44b69bf052321e46808347b152f533062976c374088d844f8cae70070b

    • SSDEEP

      3072:/gU7IlKYCPqVyAcAva972RaA2uZu8e8hl:JIIneja972RaA2uZu

    Score
    10/10
    redlinelenoxinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks