Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

  • Size

    221KB

  • Sample

    240502-gvavwaah8w

  • MD5

    4b8ccdb549d6490a90948fce3886c722

  • SHA1

    fb09d13fa019a4316770e4ce8a845fa1aee9038c

  • SHA256

    b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

  • SHA512

    9b3743b414ced47c0faa98720f776fd486b43318ea8095f789ff1436b7d5f04ffa5b8bb5f0c59b1aa50c61e670a07cdb1fbb0eea376b83832b79517620c03fa6

  • SSDEEP

    3072:szf+F0odnFNgcnWYGO/2Fhp+Gt/qYLIkZ79F9tDonob8:IWF0CFNgcnhGO/Sj/3IkZxzFono

Score
10/10
redlinesq1infostealer

Malware Config

Extracted

Family

redline

Botnet

sq1

C2

185.254.37.67:20454

Targets

    • Target

      b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

    • Size

      221KB

    • MD5

      4b8ccdb549d6490a90948fce3886c722

    • SHA1

      fb09d13fa019a4316770e4ce8a845fa1aee9038c

    • SHA256

      b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

    • SHA512

      9b3743b414ced47c0faa98720f776fd486b43318ea8095f789ff1436b7d5f04ffa5b8bb5f0c59b1aa50c61e670a07cdb1fbb0eea376b83832b79517620c03fa6

    • SSDEEP

      3072:szf+F0odnFNgcnWYGO/2Fhp+Gt/qYLIkZ79F9tDonob8:IWF0CFNgcnhGO/Sj/3IkZxzFono

    Score
    10/10
    redlinesq1infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks