Overview

overview

10

Static

static

1

a58e1ca086...ed.exe

windows7-x64

10

a58e1ca086...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a58e1ca08662224133a588340c92977a0c8e449287fc66ee24c962cbfadcd2ed

  • Size

    2.3MB

  • Sample

    241110-zxntmavhpg

  • MD5

    471cd843cafd0c683fcf443938ea57fc

  • SHA1

    7c0dd2817b7e9fcadea4f50fbf55027fe02b9dbf

  • SHA256

    a58e1ca08662224133a588340c92977a0c8e449287fc66ee24c962cbfadcd2ed

  • SHA512

    8eb74441904e8f260d95690684e1f82ace12c173a044a3ee12b1e4e0e0822b817ae11f7b19f991e4fdc97a3d592abea3de4e3aaff92bbaf1630a20161f88347f

  • SSDEEP

    24576:0AN0mRQJEjZr7E/TO/oxm0lTsQ6dabP6Xxf8ZgOfBdSHuQ5p3h3T3:0AN0mRQJEjZr7c+jC5bP6XB8ZgGU

Score
10/10
redlineinst bot usadiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

inst bot usa

C2

185.215.113.74:21098

Attributes
  • auth_value

    899dc7b7d3f657473afed493a701bbbc

Targets

    • Target

      a58e1ca08662224133a588340c92977a0c8e449287fc66ee24c962cbfadcd2ed

    • Size

      2.3MB

    • MD5

      471cd843cafd0c683fcf443938ea57fc

    • SHA1

      7c0dd2817b7e9fcadea4f50fbf55027fe02b9dbf

    • SHA256

      a58e1ca08662224133a588340c92977a0c8e449287fc66ee24c962cbfadcd2ed

    • SHA512

      8eb74441904e8f260d95690684e1f82ace12c173a044a3ee12b1e4e0e0822b817ae11f7b19f991e4fdc97a3d592abea3de4e3aaff92bbaf1630a20161f88347f

    • SSDEEP

      24576:0AN0mRQJEjZr7E/TO/oxm0lTsQ6dabP6Xxf8ZgOfBdSHuQ5p3h3T3:0AN0mRQJEjZr7c+jC5bP6XB8ZgGU

    Score
    10/10
    redlineinst bot usadiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks