General

  • Target

    e212f76e39d3eba1895165994c71b8d1d58c8b301b5dcecd73c147e8f15317f0

  • Size

    373KB

  • Sample

    210914-za6e6agce2

  • MD5

    75e8119371ad1b5a3fbf2a1fd8e6f7b1

  • SHA1

    aba5810ba642905086b57d15e2a6108a0ae23b5b

  • SHA256

    e212f76e39d3eba1895165994c71b8d1d58c8b301b5dcecd73c147e8f15317f0

  • SHA512

    d5a2b98a666b267c5563c8e0d7a361c8ca52f4cdc7277beb8fe098ad114c30cf5fc6e57ed6a35eea39f3683eb5d6b1f4d979db3b4696ffce08d7449888484da2

Malware Config

Extracted

Family

redline

Botnet

10fk

C2

185.45.192.203:80

Targets

    • Target

      e212f76e39d3eba1895165994c71b8d1d58c8b301b5dcecd73c147e8f15317f0

    • Size

      373KB

    • MD5

      75e8119371ad1b5a3fbf2a1fd8e6f7b1

    • SHA1

      aba5810ba642905086b57d15e2a6108a0ae23b5b

    • SHA256

      e212f76e39d3eba1895165994c71b8d1d58c8b301b5dcecd73c147e8f15317f0

    • SHA512

      d5a2b98a666b267c5563c8e0d7a361c8ca52f4cdc7277beb8fe098ad114c30cf5fc6e57ed6a35eea39f3683eb5d6b1f4d979db3b4696ffce08d7449888484da2

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks