Overview

overview

10

Static

static

3

5c99ef6997...39.exe

windows7-x64

10

5c99ef6997...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c99ef699747201b9880942497aec5caaec6a214dd0e3ba8e26373d380561b39

  • Size

    295KB

  • Sample

    240406-1akzwsbd4z

  • MD5

    239a192a49067a4d346bf23bbf861222

  • SHA1

    f7adcbb7bdf4d1f55dcdf696d3df8a8fd331d991

  • SHA256

    5c99ef699747201b9880942497aec5caaec6a214dd0e3ba8e26373d380561b39

  • SHA512

    e727f76344a2066ae307871c2c3dd65c499fb5704da4f39c134651650f6204a91738d002f8b6d326746e59762053f143edab147784f2901f49e34c8b28b2e3f4

  • SSDEEP

    6144:nbklngfPgoKYpzQiW/zfyPG3pxVfGAm3:bLXgxYpgzOMBw

Score
10/10
redlinerosninfostealer

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      5c99ef699747201b9880942497aec5caaec6a214dd0e3ba8e26373d380561b39

    • Size

      295KB

    • MD5

      239a192a49067a4d346bf23bbf861222

    • SHA1

      f7adcbb7bdf4d1f55dcdf696d3df8a8fd331d991

    • SHA256

      5c99ef699747201b9880942497aec5caaec6a214dd0e3ba8e26373d380561b39

    • SHA512

      e727f76344a2066ae307871c2c3dd65c499fb5704da4f39c134651650f6204a91738d002f8b6d326746e59762053f143edab147784f2901f49e34c8b28b2e3f4

    • SSDEEP

      6144:nbklngfPgoKYpzQiW/zfyPG3pxVfGAm3:bLXgxYpgzOMBw

    Score
    10/10
    redlinerosninfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks