Overview

overview

10

Static

static

10

0x00080000...16.exe

windows7-x64

10

0x00080000...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00080000000122ed-116.dat

  • Size

    145KB

  • Sample

    240306-zwqxlaac9w

  • MD5

    a9d720bc539201de83cc4c7123899986

  • SHA1

    2383da8e0a8593c23866c348bc51764192957104

  • SHA256

    34c700463317e3ce8646c2ab1c3e97c949d4127b25953d5087ee588c29b064af

  • SHA512

    371f36f07a671ebc2248c7f4116d868136dd2982b5e70d042b2b36719ad3da433bad82b2b2d852fb75d6fa39be63ea55c1a0749dd3cf3d2db826de2da3ba9962

  • SSDEEP

    3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP

Score
10/10
redlinelarryinfostealer

Malware Config

Extracted

Family

redline

Botnet

larry

C2

185.161.248.75:4132

Attributes
  • auth_value

    9039557bb7a08f5f2f60e2b71e1dee0e

Targets

    • Target

      0x00080000000122ed-116.dat

    • Size

      145KB

    • MD5

      a9d720bc539201de83cc4c7123899986

    • SHA1

      2383da8e0a8593c23866c348bc51764192957104

    • SHA256

      34c700463317e3ce8646c2ab1c3e97c949d4127b25953d5087ee588c29b064af

    • SHA512

      371f36f07a671ebc2248c7f4116d868136dd2982b5e70d042b2b36719ad3da433bad82b2b2d852fb75d6fa39be63ea55c1a0749dd3cf3d2db826de2da3ba9962

    • SSDEEP

      3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP

    Score
    10/10
    redlinelarryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks