Overview

overview

10

Static

static

3

9ed7efc08e...cs.exe

windows7-x64

10

9ed7efc08e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ed7efc08e7e9b91ac6d1f92103d10a0_NeikiAnalytics

  • Size

    341KB

  • Sample

    240511-jay33sde7w

  • MD5

    9ed7efc08e7e9b91ac6d1f92103d10a0

  • SHA1

    2b74cdc51c9b661a35b6c66b9efb35324f011003

  • SHA256

    eff8e0cdae3cb62e5abaac7fda132026f5a87e51bfd4cbe64c1a825fd04518de

  • SHA512

    8e8e99577a95017cc2138c62e96369e1a13869de5b975ab6ee6de27c5c6490b50f20dc833c9406b1195b1d906fe9d66a127053277f45364e3297fddd721408ce

  • SSDEEP

    6144:nYhZIJqcfqBbZVj2UVir0JNciLlhNcTy3mPY/1Fyj:YfUqcfqBzj28ir0JBh2qmQ/Pyj

Score
10/10
redlinezgratinfostealerrat

Malware Config

Targets

    • Target

      9ed7efc08e7e9b91ac6d1f92103d10a0_NeikiAnalytics

    • Size

      341KB

    • MD5

      9ed7efc08e7e9b91ac6d1f92103d10a0

    • SHA1

      2b74cdc51c9b661a35b6c66b9efb35324f011003

    • SHA256

      eff8e0cdae3cb62e5abaac7fda132026f5a87e51bfd4cbe64c1a825fd04518de

    • SHA512

      8e8e99577a95017cc2138c62e96369e1a13869de5b975ab6ee6de27c5c6490b50f20dc833c9406b1195b1d906fe9d66a127053277f45364e3297fddd721408ce

    • SSDEEP

      6144:nYhZIJqcfqBbZVj2UVir0JNciLlhNcTy3mPY/1Fyj:YfUqcfqBzj28ir0JBh2qmQ/Pyj

    Score
    10/10
    redlinezgratinfostealerrat

    • Detect ZGRat V1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks