General

  • Target

    eef5d5e1ef42447ac76c0858fdbe3a0199490bed4e06991da46f696095af0123

  • Size

    277KB

  • Sample

    210915-gqyq5schfr

  • MD5

    fb7bc954c44ea2a582345997f3b88b11

  • SHA1

    f26d1c7e3c078be7d2a2e73edfdf07633d3b5348

  • SHA256

    eef5d5e1ef42447ac76c0858fdbe3a0199490bed4e06991da46f696095af0123

  • SHA512

    4cca6c1e23ffabeaa1c1d5450538ee0017ab68132d0e8c1119acc32246509b40e762e9afdc549bc4e5955c33fbb108e965ab4cfc4d357dba10135b26bf320149

Malware Config

Extracted

Family

redline

Botnet

10fk

C2

185.45.192.203:80

Targets

    • Target

      eef5d5e1ef42447ac76c0858fdbe3a0199490bed4e06991da46f696095af0123

    • Size

      277KB

    • MD5

      fb7bc954c44ea2a582345997f3b88b11

    • SHA1

      f26d1c7e3c078be7d2a2e73edfdf07633d3b5348

    • SHA256

      eef5d5e1ef42447ac76c0858fdbe3a0199490bed4e06991da46f696095af0123

    • SHA512

      4cca6c1e23ffabeaa1c1d5450538ee0017ab68132d0e8c1119acc32246509b40e762e9afdc549bc4e5955c33fbb108e965ab4cfc4d357dba10135b26bf320149

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks