Overview

overview

10

Static

static

3

e089b9aa6b...a4.exe

windows7-x64

10

e089b9aa6b...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8878c7e38a4c44b9e99ed2a4af4a438572eca5853ba044c61794acac1539fe8

  • Size

    258KB

  • Sample

    241110-3ypn4a1lbk

  • MD5

    76625040b74efc54b90866ace77d0847

  • SHA1

    3d84617e73bbbaa33340582fbe809b884e4b8322

  • SHA256

    b8878c7e38a4c44b9e99ed2a4af4a438572eca5853ba044c61794acac1539fe8

  • SHA512

    4be541b0a339b43aef40a356532f6510a5242af7daa4757a0e604fd27d4385f0ce3921bf1bbd0d3ed5717ffbad086bc83de83d9d8806c9e2408dbaf35f673fbe

  • SSDEEP

    6144:IYMh98urVuNuGZ6QbYitSbRje2xjUtXcwirBZow2p/aDP9:AhNU406QbP2dUiqw4iB

Score
10/10
redline@2023@newdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      e089b9aa6bcc93f8272ad326e38781f37bf1e64926cfd4d7ede385126830b0a4

    • Size

      331KB

    • MD5

      4c143af52121301df459982bd515e60a

    • SHA1

      3884854543055e4251f0caa38081a024d38f99be

    • SHA256

      e089b9aa6bcc93f8272ad326e38781f37bf1e64926cfd4d7ede385126830b0a4

    • SHA512

      ef0b856dba2de86008d04f15bf3ffb73776f60257fbb9b1bad187a25b45916455d8fe4078900405639cb931fc802e99ad3faac936fe8912b1e1548c9e067b3d9

    • SSDEEP

      6144:DaBL3XLYbFU6QNYitebRje2xjUtbcwirBZLsdCJbxp:DaBjXcW6QN/2dUCnf

    Score
    10/10
    redline@2023@newdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks