Overview

overview

10

Static

static

3

2092daee7f...a7.exe

windows7-x64

10

2092daee7f...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a87fbe9dbccb32a0da33988208efa3b72b02d565aa1e38ffe4e314fe08ac8b0e

  • Size

    245KB

  • Sample

    241108-ls36vszjb1

  • MD5

    56ab89434d996118c43b1f152bf0ecc9

  • SHA1

    e5fbd829c686f1483d6d4344c811825e6d4b5ac3

  • SHA256

    a87fbe9dbccb32a0da33988208efa3b72b02d565aa1e38ffe4e314fe08ac8b0e

  • SHA512

    0e1f30bcb3290c7a41ec425cc89be7dab1832cd961ce7eae5a415bc264103ccd3100fa8ca1ac41d24fa8bfdbb74fab4c6b952017562fa65c8c01c92b47d3ebf5

  • SSDEEP

    6144:X/ozUiytKAEKD4dtoIfHdGOnzpF9JXtF3CBXe1OQlGIxA9:PozUiyKlKy3fHdGOP93vxGv9

Score
10/10
redlinenewdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

new

C2

176.113.115.16:4122

Attributes
  • auth_value

    0ae189161615f61e951d226417eab9d5

Targets

    • Target

      2092daee7f4e0137f6295f3a4c8c4e159a5b5ab2da70d51c89ffe83a41d2a6a7.exe

    • Size

      334KB

    • MD5

      e0b75df6a7bb685a583f660b432412b3

    • SHA1

      724c076622a94c9b836981570dfe9fc9cd58557e

    • SHA256

      2092daee7f4e0137f6295f3a4c8c4e159a5b5ab2da70d51c89ffe83a41d2a6a7

    • SHA512

      f5064d28e7e803c1e2b25883b048171e0ea889daac21461d88caacb11cdeb97b46b0f2055ecb6224e10b48762b879f67b834a0bb4f47a39ff71a3a5238a56c4c

    • SSDEEP

      6144:9bgQsy6LA1PHGHweck3o8WcEQd+a6tMcmNx9eSNske:9bK9IPHGGkWQstWYSe

    Score
    10/10
    redlinenewdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks