Overview

overview

10

Static

static

3

f0e86a2c2b...dd.exe

windows7-x64

10

f0e86a2c2b...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dda902977d13bd772af21e6fafe35604c24a7b579a5a8b9c22aebe6d3684663e

  • Size

    258KB

  • Sample

    241111-c9tjba1fje

  • MD5

    f33480cd60f1b51b9e5049569b28f87e

  • SHA1

    d5b8cdb5e0ef727525f2a68b7d886b97ea6631eb

  • SHA256

    dda902977d13bd772af21e6fafe35604c24a7b579a5a8b9c22aebe6d3684663e

  • SHA512

    bd8b84ae6ed8f6da5c0957a09325bdf60676a03f536ce4667ecc30b8f2a9866b0367647c997aa47df8e83b8b5bbf5415e25aff860437b78f8a4d80465b3bddfc

  • SSDEEP

    6144:FDnE2Eq2xnsg4TSEemZyLKrt1ndDN8HOeYCEHmAXb8gOl:5nRExx4thBxN8HXYCYmmtE

Score
10/10
redlinetruddiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

trud

C2

31.41.244.198:4083

Attributes
  • auth_value

    a5942e18edc400a8c1782120906798ef

Targets

    • Target

      f0e86a2c2b69d806ecf753e88bc075033046a5da39b2e19f5649bc0d753ee9dd

    • Size

      350KB

    • MD5

      dfcfd08da411e772227c50418890dc16

    • SHA1

      4a597f9a938232aba321a636fd387a5048d9901f

    • SHA256

      f0e86a2c2b69d806ecf753e88bc075033046a5da39b2e19f5649bc0d753ee9dd

    • SHA512

      64db183ff1b6174941fbbab32fd2e8aea36ca99c7e8d4fc81310ffa614895d19ab5ea85ba09500667d4f733f8a5fdf13d35ab7f311a8de380dc3fed101fd0915

    • SSDEEP

      6144:OLT1Qg4TSEmmZoLKRt1ndPN8HOz3/VmHFD+Vl7l:O/OFxBxN8HmVm4X

    Score
    10/10
    redlinetruddiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks