Overview

overview

10

Static

static

3

ef154c1a36...5c.exe

windows7-x64

10

ef154c1a36...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d453e4b116d991173ef316079f92576025810b6fb6f53ad4a8e2e8485a26b64

  • Size

    261KB

  • Sample

    241110-3smbsaxhpc

  • MD5

    aea72ce103229639a121d0c2ca4d217b

  • SHA1

    063bc5bdeeccf8eb031b076b14bdd8d09011d1a0

  • SHA256

    6d453e4b116d991173ef316079f92576025810b6fb6f53ad4a8e2e8485a26b64

  • SHA512

    7c160f2d8c3e72b1510f52d43f4df19c48ef1536e1cb622c8985042bc6c7e578cbeae863f4f346461f3a5658db012b3c229fc646fb2321f7ef869dc2cca66070

  • SSDEEP

    6144:yen8B5u6FxuBECspXBdHzj/qnk6eq6lRYnbeUbA:yeg5u6qMX3/qkVOA

Score
10/10
redlineslovodiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

slovo

C2

31.41.244.198:4083

Attributes
  • auth_value

    b6b22620ca671043ee40c053d9ea48a7

Targets

    • Target

      ef154c1a368ab61cbfa7cff21a63d5c8e8eb49b8249b1aee133030a6559fc45c

    • Size

      346KB

    • MD5

      91a1c815e7ed20023ac4ab700935f276

    • SHA1

      da954dadd286993a0304d304d58bda6301fb09e3

    • SHA256

      ef154c1a368ab61cbfa7cff21a63d5c8e8eb49b8249b1aee133030a6559fc45c

    • SHA512

      5a33a5f86eca901ebb494ad1af5652c1d5cf0e7f71e18985bf4f7ecd05d3e6bc3652f72f6ad028dad22ad311b4d7c435f1637639c9ec5e7d8548dbc2b74619f0

    • SSDEEP

      6144:xL3UPpYOZ6Fx0BECsnXBdXzj/qnq6eq6oz1RaMXXd:xLUPG86IoXn/qqGzS6Xd

    Score
    10/10
    redlineslovodiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks