General
- Target 82799745ece683e0cd6840e3092a9fc2c1461e805acccccf117944035a9e6a6e.bin
- Size 2.5MB
- Sample260819-bn8knstglc
- SHA256 82799745ece683e0cd6840e3092a9fc2c1461e805acccccf117944035a9e6a6e
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
BANK$
C2
-
91.107.159.152:33685
Attributes
-
auth_value
66ea2d647f572a3f796275f43e7a8e85
Targets
-
- Target Collins.dll
- Size 361KB
- SHA256 e6219716a7056216acf11552f292598051c9cd5689009c7f48c7fcf94ec11684
Score3/10 -
- Target Decrassify.exe
- Size 175KB
- SHA256 07c3f7139f9a76bb1ea788ef9c55eb00bf617f5c5e7c8006cf13564f99edcb58
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
- Target Inspector.dll
- Size 16KB
- SHA256 ff1b42ea7d56a37eae801adbddb7116f52a4664c0b41302736f522852edc2747
Score3/10 -
- Target Quickbooks.exe
- Size 468.1MB
- SHA256 36854591c35a567f4cb31b9a4e8c374d41d366f904a0d515a1cff820bfc43be5
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
-
Suspicious use of SetThreadContext
-
- Target Tigra.dll
- Size 42KB
- SHA256 411569f9f0b865c651adc1234d23f86cd98fe5cd641704702276e9882be113b6
Score3/10