General

  • Target

    65ab064d67dccd8f42f3f30dc9ea3ae8413a996a70e25141c2df9ae5bacb980c

  • Size

    277KB

  • Sample

    210915-m4cnqadfcl

  • MD5

    ff447668e8d59b1b4ed5de745c8e145a

  • SHA1

    2bfea3972775aec3cac45853d4bf913ef65e4ca5

  • SHA256

    65ab064d67dccd8f42f3f30dc9ea3ae8413a996a70e25141c2df9ae5bacb980c

  • SHA512

    2c3af874ae06c87a1c9a369be6f21a56ef296c822b19fc2e83f6aacf09e69033c94a5882bd83a403f3859e0286bc765beded8c48fbddecc5de5b55ff5cd87c21

Malware Config

Extracted

Family

redline

Botnet

10fk

C2

185.45.192.203:80

Targets

    • Target

      65ab064d67dccd8f42f3f30dc9ea3ae8413a996a70e25141c2df9ae5bacb980c

    • Size

      277KB

    • MD5

      ff447668e8d59b1b4ed5de745c8e145a

    • SHA1

      2bfea3972775aec3cac45853d4bf913ef65e4ca5

    • SHA256

      65ab064d67dccd8f42f3f30dc9ea3ae8413a996a70e25141c2df9ae5bacb980c

    • SHA512

      2c3af874ae06c87a1c9a369be6f21a56ef296c822b19fc2e83f6aacf09e69033c94a5882bd83a403f3859e0286bc765beded8c48fbddecc5de5b55ff5cd87c21

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks