Overview

overview

10

Static

static

3

23471129d6...ee.exe

windows7-x64

10

23471129d6...ee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b39c93ba70d0a05f106b3f8f687aeb43ca971c06b0b05bc6a861d1e50f2f5b90

  • Size

    221KB

  • Sample

    241110-b3z7vazkej

  • MD5

    15879f35202375f9043d44f1d4376d4d

  • SHA1

    8734ec48de4c1dbde62108660e11f84bdf527c5b

  • SHA256

    b39c93ba70d0a05f106b3f8f687aeb43ca971c06b0b05bc6a861d1e50f2f5b90

  • SHA512

    ee3b598fc1d429ef4a19b0ba0c22125393fd26ef83bf38045cbf8b2a87a782d8eddecce826484c602ece29b2287999524f8727bd1beb8c5466558a4da33bef9c

  • SSDEEP

    3072:ZOHc+TFsoe2CueUhhaaxidZ9HrJNiVw+hUqpBp1JDiZA7yB3ACbemeGMOp3pyOUu:OT+oYueUhaZ5zihZJDNkQxGMo3AZUf5

Score
10/10
redlinenewdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

new

C2

176.113.115.16:4122

Attributes
  • auth_value

    0ae189161615f61e951d226417eab9d5

Targets

    • Target

      23471129d64141ddb76aa5dfda8bd159e0674d87b9ae7a5b0d503caa2c7145ee

    • Size

      278KB

    • MD5

      65ecdb1e1bcb0dfa262f4fdf03ff88ba

    • SHA1

      54a07d10b3d758e0b11d0ad13025a91a9017127a

    • SHA256

      23471129d64141ddb76aa5dfda8bd159e0674d87b9ae7a5b0d503caa2c7145ee

    • SHA512

      9290ba44654c6076264ddbb1ce140d3580ffa29998d37a2cc88d383e6bd89e716fbe59b0d814c03a186d7b6be8e356e706c58fa963ce100f70adae9ff81b7fb9

    • SSDEEP

      3072:7jTX8GLpW4+4cn5oeeUhhaaxidZfHrJNiVw+hUwpBp1JDwZA7yB3ACbGmeGMOp3M:nLs4+4c1eUhaZvziBZJDjkQXGMo3mfQ

    Score
    10/10
    redlinenewdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks