Overview

overview

10

Static

static

10

9ed10b433c...KI.exe

windows7-x64

10

9ed10b433c...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ed10b433c74f08adb0ce4836163ad10_NEIKI

  • Size

    169KB

  • Sample

    240508-cd9wescf6s

  • MD5

    9ed10b433c74f08adb0ce4836163ad10

  • SHA1

    755d5c9bca759d8331b029689e6e672ba20375e1

  • SHA256

    f8ef6dc5596b55b918536116f351c2db1d5bab47dbd7f95f7e15d9eae5a5ca21

  • SHA512

    f62c6d961ab967affcb3fefb0a7c5377d5c6cb686c8abba876b26fc881d0e7d40227075f282f56a4a20409dfe55c11a477aad1e6c7ac2582d87d7513a3cdfd32

  • SSDEEP

    1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

Score
10/10
redlinemostinfostealer

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      9ed10b433c74f08adb0ce4836163ad10_NEIKI

    • Size

      169KB

    • MD5

      9ed10b433c74f08adb0ce4836163ad10

    • SHA1

      755d5c9bca759d8331b029689e6e672ba20375e1

    • SHA256

      f8ef6dc5596b55b918536116f351c2db1d5bab47dbd7f95f7e15d9eae5a5ca21

    • SHA512

      f62c6d961ab967affcb3fefb0a7c5377d5c6cb686c8abba876b26fc881d0e7d40227075f282f56a4a20409dfe55c11a477aad1e6c7ac2582d87d7513a3cdfd32

    • SSDEEP

      1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

    Score
    10/10
    redlinemostinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks