General

  • Target

    Test1.exe

  • Size

    329KB

  • Sample

    210701-s1m8j119px

  • MD5

    b816584c72ed149d21aa9e4b5fe9e791

  • SHA1

    63063af050022b945b9b12cf4066aed49565626c

  • SHA256

    5a5cd7835e159c6ac825174da6500dd2cc4413b52dd4e64bf49dcb87377e6a92

  • SHA512

    72b36ff56875284a8125e6fd8398931756f038f7297b8451e3ea6c69cc59406f9fee13e76335cea2d7d1d0a6de286c16f81e2e3d17d80bd677f58591328a9d5f

Malware Config

Extracted

Family

redline

Botnet

Test1

C2

195.201.17.219:25524

Targets

    • Target

      Test1.exe

    • Size

      329KB

    • MD5

      b816584c72ed149d21aa9e4b5fe9e791

    • SHA1

      63063af050022b945b9b12cf4066aed49565626c

    • SHA256

      5a5cd7835e159c6ac825174da6500dd2cc4413b52dd4e64bf49dcb87377e6a92

    • SHA512

      72b36ff56875284a8125e6fd8398931756f038f7297b8451e3ea6c69cc59406f9fee13e76335cea2d7d1d0a6de286c16f81e2e3d17d80bd677f58591328a9d5f

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks