Overview

overview

10

Static

static

3

d5dee73968...a8.exe

windows7-x64

10

d5dee73968...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bd0dc2acf94e4de6d2fa4e698212784b44cf173953a85a466cf385d4be65d1a

  • Size

    235KB

  • Sample

    241110-1cc23aymhr

  • MD5

    bb4afbc05b360e7d627af22428886c82

  • SHA1

    589ea78877a3106ac2cf2fb61f2b16776829e411

  • SHA256

    1bd0dc2acf94e4de6d2fa4e698212784b44cf173953a85a466cf385d4be65d1a

  • SHA512

    533717da6119219775cc7a6dccf8ac35620902c77ea807778618f43680e3bb44509c4ba3a6cda113d11571f7e0e2b0a87cf394b37073905165e40b41f31fb36a

  • SSDEEP

    6144:Rk05rcMhExMrSODmze4WVJGnNrH9gTHyq/i74AFU6+hzuEH:6Gc7x9QmJwo9H9gTHyiQU6+p5H

Score
10/10
redline@chicagodiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@chicago

C2

185.11.61.125:22344

Attributes
  • auth_value

    21f863e0cbd09d0681058e068d0d1d7f

Targets

    • Target

      d5dee73968244eb16f5cf4b2dc7b7af5e12286cfa4b9a0c03d4af1b42f9bb9a8.exe

    • Size

      291KB

    • MD5

      53bc11e0efb0fcd9faca89a9520bfb1d

    • SHA1

      b6fe95f56b96e43d7b88f0ead15838b3aec31772

    • SHA256

      d5dee73968244eb16f5cf4b2dc7b7af5e12286cfa4b9a0c03d4af1b42f9bb9a8

    • SHA512

      2f617de5825faee2bed5efb3bbcdc6e355418021f0e9d4d8fb493f417892f28b6d6d5e21ec24875aac408d2431c90c7043756689fcf76d8dea0155aa5d8b21f1

    • SSDEEP

      6144:RaqfJwWi5wBCGGGmXpca7XkLO5wV+LYBbswDsRlJ5F:RaDO/oILnV+LYBbsIU

    Score
    10/10
    redline@chicagodiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks