Overview

overview

10

Static

static

10

0x00070000...16.exe

windows7-x64

10

0x00070000...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00070000000126ea-116.dat

  • Size

    145KB

  • Sample

    240307-f7lbpsef83

  • MD5

    104e2180b2c31cacc4731f697ae77592

  • SHA1

    27c1cb12a878e48accf485c9a4d0f34ab12f9cdc

  • SHA256

    b2469a6b20a45c612acf297fbdcd8d8628a29307def47faf7cd8d773f2340aa4

  • SHA512

    74b2df7a45fa8f596707a8888fe0aff0bd2840403b20c029a7de1631553051f0226f9a0a0b8168546e5b27387ef3358a5986106e3bb9182c9a0cef69715a663d

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Score
10/10
redlinedizainfostealer

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x00070000000126ea-116.dat

    • Size

      145KB

    • MD5

      104e2180b2c31cacc4731f697ae77592

    • SHA1

      27c1cb12a878e48accf485c9a4d0f34ab12f9cdc

    • SHA256

      b2469a6b20a45c612acf297fbdcd8d8628a29307def47faf7cd8d773f2340aa4

    • SHA512

      74b2df7a45fa8f596707a8888fe0aff0bd2840403b20c029a7de1631553051f0226f9a0a0b8168546e5b27387ef3358a5986106e3bb9182c9a0cef69715a663d

    • SSDEEP

      3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

    Score
    10/10
    redlinedizainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks