Overview

overview

10

Static

static

1

3bd6e5bbbf...cs.exe

windows7-x64

10

3bd6e5bbbf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bd6e5bbbf514ec101c349d1a8ee19f0_NeikiAnalytics.exe

  • Size

    250KB

  • Sample

    240526-ad8bgsfd9z

  • MD5

    3bd6e5bbbf514ec101c349d1a8ee19f0

  • SHA1

    9161c036dacb406713c3f763c5463e690a1a9c87

  • SHA256

    0a73427db4b23e2b9aaddccaddce1e99aa5c02aa2a347775a42f39c9d63b4cce

  • SHA512

    0e8058fdd0cc03d148cf5b32c81cac3766d180e25763785df0170e8398c38f0fa55f975d02c70d6047e424a310a1364600786c04203030cf2326047744a3031f

  • SSDEEP

    3072:csBMbqgqEH9y/kn6Y/wHKW/Gl2VfXu58w4S1lwNirkqNKHnJiIJHpCusBjnAuU08:3wqxk6r/ECXY8w4SkN4eipLAIZvW

Score
10/10
redlinesmokeinfostealer

Malware Config

Extracted

Family

redline

Botnet

smoke

C2

83.97.73.131:19071

Attributes
  • auth_value

    aaa47198b84c95fcce9397339e8af9d4

Targets

    • Target

      3bd6e5bbbf514ec101c349d1a8ee19f0_NeikiAnalytics.exe

    • Size

      250KB

    • MD5

      3bd6e5bbbf514ec101c349d1a8ee19f0

    • SHA1

      9161c036dacb406713c3f763c5463e690a1a9c87

    • SHA256

      0a73427db4b23e2b9aaddccaddce1e99aa5c02aa2a347775a42f39c9d63b4cce

    • SHA512

      0e8058fdd0cc03d148cf5b32c81cac3766d180e25763785df0170e8398c38f0fa55f975d02c70d6047e424a310a1364600786c04203030cf2326047744a3031f

    • SSDEEP

      3072:csBMbqgqEH9y/kn6Y/wHKW/Gl2VfXu58w4S1lwNirkqNKHnJiIJHpCusBjnAuU08:3wqxk6r/ECXY8w4SkN4eipLAIZvW

    Score
    10/10
    redlinesmokeinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks