Overview

overview

10

Static

static

3

4cae5d6df5...72.exe

windows7-x64

10

4cae5d6df5...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    463f2b81b3300c2aedcdad436a89c731adb51dbbb95324ccf42e5209ae09bf29

  • Size

    261KB

  • Sample

    241111-c5s2zsznez

  • MD5

    baabfbad51fee3e8af3042942c439a88

  • SHA1

    ac2dc458e0c06191608936d6ba8e527f7dd51f1c

  • SHA256

    463f2b81b3300c2aedcdad436a89c731adb51dbbb95324ccf42e5209ae09bf29

  • SHA512

    1ee8ea97f4c25f36833c949768c977e42bd61f3931c7deb7c08c03522a626edcec449344890ee4657e8f19bfe03f0c007df590125e38cee2b3243abc7c77ecb6

  • SSDEEP

    6144:euHMQddPS1zeqYJMexVXP3iSnhw9h6r/XuM3SgNcQg8UnYP:PHM6keqYHVXqSnyh03SAV0nYP

Score
10/10
redlinenokiadiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

nokia

C2

31.41.244.198:4083

Attributes
  • auth_value

    3b38e056d594ae0cf1368e6e1daa3a4e

Targets

    • Target

      4cae5d6df517bdc45f3bb928f237109cb6d3f4d6afb50b0b3ea11a82c1d0ca72

    • Size

      334KB

    • MD5

      cf3976442bf0b87a5b384e60342219da

    • SHA1

      8be4fa569de7780fca7b32b2dc11d96c242822f7

    • SHA256

      4cae5d6df517bdc45f3bb928f237109cb6d3f4d6afb50b0b3ea11a82c1d0ca72

    • SHA512

      548890e1131a9d64becd6a994898feb3a19e5d0d4d12b1f07f0e3e213ab6d106ab7eb6df633aa376f506d4500f1cc42521766b800c80bcce49a250441a279519

    • SSDEEP

      6144:XI2LCT9SJMexVbP3ISnDw9h6rbXuM3SgNFrKq0OeEjcbXF:XI2O4HVbASnAh23SAx30yYbXF

    Score
    10/10
    redlinenokiadiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks