Overview

overview

10

Static

static

3

63e559068d...8f.exe

windows7-x64

10

63e559068d...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84e599529e8dfea27ef8334265c34001698bbf19bc8a8a13c215167a90c9d8f0

  • Size

    262KB

  • Sample

    241111-cg7v8szeln

  • MD5

    a043ddab8c5bd0a85c49e0ac25d0d013

  • SHA1

    31a957eb899ecdd3d3fede82d96e16826ddda5ad

  • SHA256

    84e599529e8dfea27ef8334265c34001698bbf19bc8a8a13c215167a90c9d8f0

  • SHA512

    2a1c00f8422836d2b3035bbdd435b63a5c3bca2febfacef5f4fdde38947c438dbd206fd7da0c8583be2e9d654232f5d28fdb491ec5bd8e2ed87302ba9fb0bf8a

  • SSDEEP

    6144:RtknajSfQbtZjMOlRSJiwL7a6Wa5KdSC3:Rt5jS6t5MOzSD5q

Score
10/10
redline@2023@newdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      63e559068dab02127878308ae248319b156ee57d6540fc6281ca854e85e39b8f

    • Size

      334KB

    • MD5

      74931b04ac536554b65c8513c32e6d54

    • SHA1

      5bacbf3dfa42548771e1377a6a8a963a7840de4a

    • SHA256

      63e559068dab02127878308ae248319b156ee57d6540fc6281ca854e85e39b8f

    • SHA512

      d3af219cb87c68711aeb2b4dbb577221d89e12f7540d703933871cef4807cd62da852c982b5bd42e28ac778ddadc1a4a4622aa520a3e929f59eaea214b1dba10

    • SSDEEP

      6144:I0GLYFtrfQbVZjMOlnSliwf7a6mJ6jm+4rsjlVklPH:XGyr6V5MONSKQm5klU

    Score
    10/10
    redline@2023@newdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks