Overview

overview

10

Static

static

3

035f761a81...9a.exe

windows7-x64

10

035f761a81...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f159d97de3d6d7f9a7b51b0e897816dede1c5ad8e8225819f0ce37210ec10c6f

  • Size

    232KB

  • Sample

    241111-asd17ayemc

  • MD5

    00eb727c59348167f6ec55a7cad442ca

  • SHA1

    4dac3a4377cbe8df6aff61498e94e9be704772b6

  • SHA256

    f159d97de3d6d7f9a7b51b0e897816dede1c5ad8e8225819f0ce37210ec10c6f

  • SHA512

    f4fea7775132f748b1204faa711a514bf9c7032185a3a30b66e70dd4ece987afffdda2ee9337f8b81a530a56d64ec9a6cac490bd80afec7ff44f9a47b02c51f8

  • SSDEEP

    6144:ppBatYI2Jwjk8rFMoaB3T/c8Q/o5Dcd+gBHYdkvSm85yJ3/6:3SNrxjSc8Q/oB8H9vSm85J

Score
10/10
redline@chicagodiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@chicago

C2

185.11.61.125:22344

Attributes
  • auth_value

    21f863e0cbd09d0681058e068d0d1d7f

Targets

    • Target

      035f761a810ba3b7620e8b3bb179bc2d9431b20510ecf145b5f9c6b255c3a19a

    • Size

      297KB

    • MD5

      c6faf7df3c1b80802845065cd61dcce6

    • SHA1

      4380a03660a43c6b3a4ee158f3a7a69b66e93658

    • SHA256

      035f761a810ba3b7620e8b3bb179bc2d9431b20510ecf145b5f9c6b255c3a19a

    • SHA512

      790502ad41ab3bc0b9190edf06578a093a13149c69f34e4cfd5b9f41ee5ce6e5c3d101400f962e9bf312fd488c4c994a73ba0ea0a69e665ae23a563e21c5093f

    • SSDEEP

      6144:lt1i2xPmNw2Jwjk8bFMoaB3T/c8s/o5Dc9+gBHydkv8A5:Ri2xO6rhjSc8s/oBSHjv8

    Score
    10/10
    redline@chicagodiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks