Overview

overview

10

Static

static

3

6678c2d205...41.exe

windows7-x64

10

6678c2d205...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdd1610b15ae3356b400ebe13166ba750a35418a09f03ed236d1cbbf2f66e3a4

  • Size

    253KB

  • Sample

    241111-cw7tsatnfj

  • MD5

    546685ea5b5da6c3a0ff72e637726d1f

  • SHA1

    2caf13db9c3b78de6515a345ec20a5ce8faf926f

  • SHA256

    bdd1610b15ae3356b400ebe13166ba750a35418a09f03ed236d1cbbf2f66e3a4

  • SHA512

    1b9625f7235684d15bb9fc7162ce84bfacf33597ada1448185eb85312711e5acbc636acb87b9352490f11afdbe7f9e2a628f3597c9877e0fcd6e02a265abf8e0

  • SSDEEP

    6144:Fot9guKOWLIfkFVgC0Sm3tbHsIWd+dCaTZk:Fw4O9CV4dtbMNd+dCb

Score
10/10
redline50ndiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

50n

C2

193.106.191.190:23196

Attributes
  • auth_value

    d61a9ba1568b3b8e34c959aa0f254969

Targets

    • Target

      6678c2d205b2e90dda05eb1ee4fcd01d0a9d2b56545f039ee0159e9e764eb741

    • Size

      366KB

    • MD5

      161a3f8fbd631ae6c64ef8ddcaab08fd

    • SHA1

      dc7c2ed0ed0b7aaa06167175a926c9ee0a448f55

    • SHA256

      6678c2d205b2e90dda05eb1ee4fcd01d0a9d2b56545f039ee0159e9e764eb741

    • SHA512

      f2b566f02d3ca935c1bff84a16e1edc66c927c2bc1b50fbc73b57e97a8822fc7879218c504c8adb6ec9d66398989b71c33ddeffafa7bd6babb4c5f6a44131e62

    • SSDEEP

      6144:HycssygBtAkXjlh8vr0tvLjUke7VshFVgC0im3t/HsIcbcOo:S7GBSOJh8vSvG7VszV4tt/Mpb

    Score
    10/10
    redline50ndiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks