Overview

overview

10

Static

static

3

84d1c373d1...26.exe

windows7-x64

10

84d1c373d1...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55d4864900910d2edf0fa87b28f40babb05f59d7c3786024f82bb2d969ac5751

  • Size

    278KB

  • Sample

    241111-bmgessygpl

  • MD5

    97123f5cb2939d3c1321fba2fae3e121

  • SHA1

    7067f521bef72fc565c25c849e7feb993b24cc3c

  • SHA256

    55d4864900910d2edf0fa87b28f40babb05f59d7c3786024f82bb2d969ac5751

  • SHA512

    ed875a9e4e4ddee0a409a327d3aa4d5a0b4bf13311f28daed6a613fbfb0a2b4ebf2833c2fa656e1a03296594c6e66fb2d62b64255d9a524599309aabffb8c607

  • SSDEEP

    6144:SSo95h7RQs9ln5gSZQAoQQ5X0nOQMXLeN5HUqz4vOX3x21vZijY:Sh95h7RKYoZR0TMyN5HUga0Y

Score
10/10
redlinesportdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

sport

C2

31.41.244.98:4063

Attributes
  • auth_value

    82cce55eeb56b322651e98032c09d225

Targets

    • Target

      84d1c373d17017e0d608c6992b07e8350cbaefa14728af98595a83e4bbe5b426

    • Size

      381KB

    • MD5

      f470ccf6041ac2eba34a5f81d61e23cc

    • SHA1

      8519f8bc40af111c000c732fbe7fec37de2ee12f

    • SHA256

      84d1c373d17017e0d608c6992b07e8350cbaefa14728af98595a83e4bbe5b426

    • SHA512

      b3312d0491d88ceb618a627455878ca35c121cbe0ecda16a1705e09b990646d87ea58e95e71468afb6b44c799e268a898b25133d27028d88ef25bdb2d2d6f3a9

    • SSDEEP

      6144:UHRLIXe6NLuQAoQK5X0niQMXL6N5HULtcU1laZY:IR8Xe6NLCoBR03M2N5HULK

    Score
    10/10
    redlinesportdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks