Overview

overview

10

Static

static

3

5f0bcd9dde...88.exe

windows7-x64

10

5f0bcd9dde...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f0bcd9dde4ac63098637e2b6fbb7ebe1e380589b77cdb3bddb13ad129068688

  • Size

    303KB

  • Sample

    241110-1lwwjawele

  • MD5

    3830ca457a1ad77bf0da033a2fdee9d5

  • SHA1

    ca95f073ec2e686ee2466bd994754faa093b61c7

  • SHA256

    5f0bcd9dde4ac63098637e2b6fbb7ebe1e380589b77cdb3bddb13ad129068688

  • SHA512

    e549b3a777995b651a56b67b767fd68dc939fc86f2b5b6904dc244417cd2411583c2ebd7474673c198122f2858d1aa5aca79488ad733094c21c4b97309fa6f2c

  • SSDEEP

    6144:p6zsW9tkQyrzk4CwSHVefJet+++XkhAIvgyo3Ozh:sQW9tkQyrzk4CwSHVefJej+XkhAhyas

Score
10/10
redlinefronx2discoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

fronx2

C2

fronxtracking.com:80

Attributes
  • auth_value

    0a4100df2644a6a6582137d2da2c8bd1

Targets

    • Target

      5f0bcd9dde4ac63098637e2b6fbb7ebe1e380589b77cdb3bddb13ad129068688

    • Size

      303KB

    • MD5

      3830ca457a1ad77bf0da033a2fdee9d5

    • SHA1

      ca95f073ec2e686ee2466bd994754faa093b61c7

    • SHA256

      5f0bcd9dde4ac63098637e2b6fbb7ebe1e380589b77cdb3bddb13ad129068688

    • SHA512

      e549b3a777995b651a56b67b767fd68dc939fc86f2b5b6904dc244417cd2411583c2ebd7474673c198122f2858d1aa5aca79488ad733094c21c4b97309fa6f2c

    • SSDEEP

      6144:p6zsW9tkQyrzk4CwSHVefJet+++XkhAIvgyo3Ozh:sQW9tkQyrzk4CwSHVefJej+XkhAhyas

    Score
    10/10
    redlinefronx2discoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks