Overview

overview

10

Static

static

3

16b2742f82...85.exe

windows7-x64

10

16b2742f82...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27bd8209421ce97c4f83673534303c54877440ce

  • Size

    280KB

  • Sample

    241110-3ygngsyaph

  • MD5

    74830b1a27f0df601dda80855af0e3d8

  • SHA1

    27bd8209421ce97c4f83673534303c54877440ce

  • SHA256

    5f9819c1bf86e0e9ab6984a8c25c870ad3159dc01f9f324e9f884ab9c7d680ab

  • SHA512

    15068265119d3329ed6e3b559d85db60b168b1ff03863b77772726d726357d82bf6e002d46347d00004525b4375836042e6a23c21d3c8dbb53511a6a9a1f8a52

  • SSDEEP

    6144:vuRacwYFZyJ8h8nf516bEt5FysncYfwYHGKEg2tfjLofli9O/:v/8Hy6h8f516bE3wm5brELlLmEO/

Score
10/10
redlineruzkiunikalnodiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

RuzkiUNIKALNO

C2

193.233.48.58:38989

Attributes
  • auth_value

    c504b04cfbdd4bf85ce6195bcb37fba6

Targets

    • Target

      16b2742f82cd13b78822873aa06d028707f33fae6d27f2767c74ad2a88428385

    • Size

      427KB

    • MD5

      e4e85db857944da959366ea3f944276c

    • SHA1

      8565f4ca19d3902ffab4c27025c05ebd760e4c75

    • SHA256

      16b2742f82cd13b78822873aa06d028707f33fae6d27f2767c74ad2a88428385

    • SHA512

      23e7caf88405b9e5baaecdc5c0da465023a98f26654713e2ec3bd469735494d9942d19e698e067a08d95fe6d844186e67fb64dfa19b2191f5e3b1db0b23160e4

    • SSDEEP

      12288:wzRXcQQf0Hy6H8f516fE3Cm5bunnwQ7IJ:qRDHPImGCm58wvJ

    Score
    10/10
    redlineruzkiunikalnodiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks