General

  • Target

    dd599d35de371b3d011334df5d71b6f9b6b511d13ec093d02491b004bd71b9f6

  • Size

    316KB

  • Sample

    211014-fgzfmsgabr

  • MD5

    6d9c02912df8c3cc626f8fa9a0b6768d

  • SHA1

    55bf9bec8e7c910e1d0eac1ac9d6b73f43050d1a

  • SHA256

    dd599d35de371b3d011334df5d71b6f9b6b511d13ec093d02491b004bd71b9f6

  • SHA512

    8a15d150d1de62b8df7af4dfbcbd411492f3a133ef997d5c538d285a106f4f13f651d93df627407872a2344361a499b834bd28906630d45e14436c4b620f1758

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      dd599d35de371b3d011334df5d71b6f9b6b511d13ec093d02491b004bd71b9f6

    • Size

      316KB

    • MD5

      6d9c02912df8c3cc626f8fa9a0b6768d

    • SHA1

      55bf9bec8e7c910e1d0eac1ac9d6b73f43050d1a

    • SHA256

      dd599d35de371b3d011334df5d71b6f9b6b511d13ec093d02491b004bd71b9f6

    • SHA512

      8a15d150d1de62b8df7af4dfbcbd411492f3a133ef997d5c538d285a106f4f13f651d93df627407872a2344361a499b834bd28906630d45e14436c4b620f1758

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks