Overview

overview

10

Static

static

3

b58383e425...02.exe

windows7-x64

10

b58383e425...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26cdbed50e95d4580bf0ae0a6ecabbfebb2a5cbb3c8856a228d88a94e46868e7

  • Size

    257KB

  • Sample

    241110-1zkenawjev

  • MD5

    5c25b83efdeb5cc2c895375772564266

  • SHA1

    57876de59a0b312f3f8b38c59b3aebb2e4fdce55

  • SHA256

    26cdbed50e95d4580bf0ae0a6ecabbfebb2a5cbb3c8856a228d88a94e46868e7

  • SHA512

    b4b078008a500f2edeb79f0e5dc36b2e452dda2ee2e2706682d8564f799a65901942e79f7f9643adfbb19f8263d5840f49b705569272cc636a2d7597113ce690

  • SSDEEP

    6144:cmbGxQoxMUOER/PnZtxg14dVPPtQwkJ52:ceQkYnZLgcVPCwkJs

Score
10/10
redlinesportdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

sport

C2

31.41.244.98:4063

Attributes
  • auth_value

    82cce55eeb56b322651e98032c09d225

Targets

    • Target

      b58383e4257f167f424605434bb42769aad802836c4313b5cc40b79f3be07d02

    • Size

      330KB

    • MD5

      3deb0a0afb73e399c9631f2690131d87

    • SHA1

      432291340889d701128101227ff74f31842332f6

    • SHA256

      b58383e4257f167f424605434bb42769aad802836c4313b5cc40b79f3be07d02

    • SHA512

      3929234afe5fb03cb39c7138b36ee85bf971895898fb9c8e7225f80093293d516d0bf0eaf58a4d614038511946a6feade4bdecc422f4f0ae8d0d617734820082

    • SSDEEP

      6144:wNgLOltBc1VHMUOER/jnZtXg145VPPt5xCYX:wNgiloHkYrZFgiVPFCY

    Score
    10/10
    redlinesportdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks