Overview

overview

10

Static

static

3

9UsqytK527x.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    9UsqytK527x.exe
  • Size 1.1MB
  • Sample260817-ynqfesgr3s
  • SHA256 b5a1610c4d567d5e0c64701f85e736a4d49813094bc93e067a44fbe95b03beea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
redlinetestdiscoveryinfostealer

Malware Config

Extracted

Family

  • redline

Botnet

  • test

C2

  • 77.91.85.137:81

Attributes
  • auth_value

    eb42c93b96eea8a95189cf1eeb4f7c0b

Targets

    • Target
      9UsqytK527x.exe
    • Size 1.1MB
    • SHA256 b5a1610c4d567d5e0c64701f85e736a4d49813094bc93e067a44fbe95b03beea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    testdiscoveryredlineinfostealer

    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks