Overview

overview

10

Static

static

10

0x00080000...13.exe

windows7-x64

10

0x00080000...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0008000000012732-1113.dat

  • Size

    145KB

  • Sample

    240307-lavf1aga94

  • MD5

    0418d14d3cf1ef898408318f90d4e610

  • SHA1

    d09315b0cfe20f0050c333c5be176fc82be9bd11

  • SHA256

    546748f94f5fee6663419ef5ca9852f67da83c720ed3352787366440634e7171

  • SHA512

    667728754840268ead1e4f2b114bea8de2e1c51305b40997f45547f42c7147acf4ee1c2ba87c162bddf514520877b2a74fe3abca8a1c977e68fd582d1f2e8b0c

  • SSDEEP

    3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

Score
10/10
redlinedizainfostealer

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.122:19062

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x0008000000012732-1113.dat

    • Size

      145KB

    • MD5

      0418d14d3cf1ef898408318f90d4e610

    • SHA1

      d09315b0cfe20f0050c333c5be176fc82be9bd11

    • SHA256

      546748f94f5fee6663419ef5ca9852f67da83c720ed3352787366440634e7171

    • SHA512

      667728754840268ead1e4f2b114bea8de2e1c51305b40997f45547f42c7147acf4ee1c2ba87c162bddf514520877b2a74fe3abca8a1c977e68fd582d1f2e8b0c

    • SSDEEP

      3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

    Score
    10/10
    redlinedizainfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks