Overview

overview

10

Static

static

3

a304fc511b...73.exe

windows7-x64

10

a304fc511b...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bf601881740232d7efe7538e1e18308f259433723e1083c3710dd57f48f268e

  • Size

    290KB

  • Sample

    241108-mbbkys1bqq

  • MD5

    2cd9bbd3264e64f55ce9f30b2d396f77

  • SHA1

    145c7f1acf2295bdb7d6e68899f0a9042807fdd1

  • SHA256

    2bf601881740232d7efe7538e1e18308f259433723e1083c3710dd57f48f268e

  • SHA512

    800c4d43f0d52d2f9e3e024708d7f0923b7efd6ab961b2aea7837795a35de2da3e75686d150c50c962ac8a06cd6c2e9fc53465e904bb39085a6ebe2593d107f6

  • SSDEEP

    6144:cIgsKlRDZTryLBiV08AuR+7xnQ90XSq4Mv0unYAiNoZMPvKNs1wa:cIgLRDZfcTRdE4SqVv0EooZqCmqa

Score
10/10
redlinenewdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

new

C2

176.113.115.16:4122

Attributes
  • auth_value

    0ae189161615f61e951d226417eab9d5

Targets

    • Target

      a304fc511b913e65ba0dcfd2caea58f967f455cb3436e6b6275bb051749a0d73

    • Size

      394KB

    • MD5

      4e813a05792f70c19e74945ecb68a546

    • SHA1

      f86fe343e16e327a245ee621b914176ab75b5527

    • SHA256

      a304fc511b913e65ba0dcfd2caea58f967f455cb3436e6b6275bb051749a0d73

    • SHA512

      02a8e9d60bba841b4561a09d3c64f99cc4dbb67f31bdf1671cdb54b118a91be5722884dd1c2471a4a3bdd6c2f30ca9d4cfab0ab1121410738c6a65fea7d8fb54

    • SSDEEP

      6144:tkrFrLlhjSOyLBiV08AuR+FxnC90PSqSMv0unYAGoV7f4Vd:U1pRSOcT3dqSSqHv0EGozO

    Score
    10/10
    redlinenewdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks