General

  • Target

    2c2a79aa31f5458fe990b58b1df1631ea7fd2f9d80390a48f032ef2da9e29c4b

  • Size

    317KB

  • Sample

    211014-g9ht2agbhn

  • MD5

    5dfe8a9a980ee0324eb4404aa347211e

  • SHA1

    67a168ea24e286c1eee43041920f67e73331141f

  • SHA256

    2c2a79aa31f5458fe990b58b1df1631ea7fd2f9d80390a48f032ef2da9e29c4b

  • SHA512

    ed6f7266cbd9cc25c2fc1a876457f0b2da37748482b0099fd2bb061ad5578aa6eca6e56cfbac122c6c9ccd7b75a7e1e8bd551b6483e2f1421483835b4920041a

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      2c2a79aa31f5458fe990b58b1df1631ea7fd2f9d80390a48f032ef2da9e29c4b

    • Size

      317KB

    • MD5

      5dfe8a9a980ee0324eb4404aa347211e

    • SHA1

      67a168ea24e286c1eee43041920f67e73331141f

    • SHA256

      2c2a79aa31f5458fe990b58b1df1631ea7fd2f9d80390a48f032ef2da9e29c4b

    • SHA512

      ed6f7266cbd9cc25c2fc1a876457f0b2da37748482b0099fd2bb061ad5578aa6eca6e56cfbac122c6c9ccd7b75a7e1e8bd551b6483e2f1421483835b4920041a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks