Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    264db4d677606c95912a93a457675d5ebaa24dc886da8bbcb800fe831c540a54

  • Size

    297KB

  • Sample

    240701-fnzpzsxanf

  • MD5

    0970456d2e2bcb36f49d23f5f2eec4ce

  • SHA1

    1e427bbeb209b636371d17801b14fabff87921be

  • SHA256

    264db4d677606c95912a93a457675d5ebaa24dc886da8bbcb800fe831c540a54

  • SHA512

    43c233e6c6fb20ee5830672f68eec2a1930aff6c3da185b7af56ede90970041157755b8893a86336711c8ba8cbe3f22818de8ddc1789ed65a7aacd596771909e

  • SSDEEP

    3072:nqFFrqwIOGNTypEmz07s3WxL9z8b5bOMhd7ETZUf5IfcZqf7D34deqiOLCbBOa:qBIOGqDZOqdITZC4cZqf7DInL

Score
10/10
redlinenewlogsinfostealer

Malware Config

Extracted

Family

redline

Botnet

newlogs

C2

85.28.47.7:17210

Targets

    • Target

      264db4d677606c95912a93a457675d5ebaa24dc886da8bbcb800fe831c540a54

    • Size

      297KB

    • MD5

      0970456d2e2bcb36f49d23f5f2eec4ce

    • SHA1

      1e427bbeb209b636371d17801b14fabff87921be

    • SHA256

      264db4d677606c95912a93a457675d5ebaa24dc886da8bbcb800fe831c540a54

    • SHA512

      43c233e6c6fb20ee5830672f68eec2a1930aff6c3da185b7af56ede90970041157755b8893a86336711c8ba8cbe3f22818de8ddc1789ed65a7aacd596771909e

    • SSDEEP

      3072:nqFFrqwIOGNTypEmz07s3WxL9z8b5bOMhd7ETZUf5IfcZqf7D34deqiOLCbBOa:qBIOGqDZOqdITZC4cZqf7DInL

    Score
    10/10
    redlinenewlogsinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks