Overview

overview

10

Static

static

10

041bf8121f...c7.exe

windows7-x64

10

041bf8121f...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

  • Size

    94KB

  • Sample

    240525-wve7xsdb2y

  • MD5

    5cc66fc0009faaa302fe725f58972c36

  • SHA1

    8cfb1792385ac13ccd796134bf0ca6f900a44979

  • SHA256

    041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

  • SHA512

    3cde9ebaecfa21258b8f84bf59ffb63d03e326dc8cac3325996d2cf0d37878229a90d5789d7c1aaf17bf4cfd2f945805aa231d5cc6231f1a8fb16eb76acb8b8d

  • SSDEEP

    1536:9ATp9NZjE6oljj9tAtzZM4YCrB/atqgdbibEB/l2kPoSG2:9ATp9DOjj9tA5C4JJatvqEhfr

Score
10/10
redline5129512298_99discoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

5129512298_99

C2

https://pastebin.com/raw/tnW31tPp

Targets

    • Target

      041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

    • Size

      94KB

    • MD5

      5cc66fc0009faaa302fe725f58972c36

    • SHA1

      8cfb1792385ac13ccd796134bf0ca6f900a44979

    • SHA256

      041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

    • SHA512

      3cde9ebaecfa21258b8f84bf59ffb63d03e326dc8cac3325996d2cf0d37878229a90d5789d7c1aaf17bf4cfd2f945805aa231d5cc6231f1a8fb16eb76acb8b8d

    • SSDEEP

      1536:9ATp9NZjE6oljj9tAtzZM4YCrB/atqgdbibEB/l2kPoSG2:9ATp9DOjj9tA5C4JJatvqEhfr

    Score
    10/10
    redline5129512298_99discoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks