Overview

overview

10

Static

static

3

9bdbaa8717...46.exe

windows7-x64

10

9bdbaa8717...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25f9beb334f88345ffc823e2b0277293f2d1f61b28a9926f26eba3d125ce41eb

  • Size

    259KB

  • Sample

    241111-ctxk2azlbz

  • MD5

    fc7b7b92242e74acf827d7de2ceac1f6

  • SHA1

    087d1b0fa57f62f20b5e4db547db89ae61e6f8b6

  • SHA256

    25f9beb334f88345ffc823e2b0277293f2d1f61b28a9926f26eba3d125ce41eb

  • SHA512

    fc38aa125ec205c892946699b8c4c07a416f0b3811d2024091a53954be6813ddee7fd88d9cb45a7a3867045152d2b1882825c36061ffac9a1a6ecaea77e89262

  • SSDEEP

    6144:lNL7erBs1X6SwmW+QZAfQQ/sJDgNZiGbJJCOmcukQtN/CT:L8Bs56S1W+Qk/sJDeYGb7COmyQWT

Score
10/10
redlineshakurdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

shakur

C2

31.41.244.198:4083

Attributes
  • auth_value

    77cf57cf0231c3bc6ab7b37cc351aa82

Targets

    • Target

      9bdbaa8717cdd9f4bd75249bbc562f1f1f4f7cffa7b84ed58f03431724d6ba46

    • Size

      350KB

    • MD5

      6b5974941359195ad8f4a30b18003fac

    • SHA1

      b67bb4c1eae74732c953a9856255ad6440ea3b1d

    • SHA256

      9bdbaa8717cdd9f4bd75249bbc562f1f1f4f7cffa7b84ed58f03431724d6ba46

    • SHA512

      26a5e00d46cfa7e881aa72a18697c244ecf505f2879a555345e509c35bf489c98f6781756ebbd9cf8c9d599c80b5862c5345ef131682fed76b22c66f5c84f646

    • SSDEEP

      6144:esLsu5nJLmW+QJAfQQ/qJDgNjiGbFJCOmFixe9nIriR1YDZ:esp5nJyW+QU/qJDeuGbvCOmqe2

    Score
    10/10
    redlineshakurdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks