General

  • Target

    71ba084b59864d89d53e0f6c52429affcfda111d6c898d773ad27db1a5ccf593

  • Size

    384KB

  • Sample

    211015-catd9sadg7

  • MD5

    3a48f656083452bb90295887d03a0bb7

  • SHA1

    df6e8e2a31c4c16f5b77990b8e67141edebdd392

  • SHA256

    71ba084b59864d89d53e0f6c52429affcfda111d6c898d773ad27db1a5ccf593

  • SHA512

    3b04767a86d52e5d4602006b06d600bb2dff09f26501302b8df1e68384a15320419c1ce9acd09888079e23232d27b03c66fbbeba00940a11c8b3bf44a244f3b4

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      71ba084b59864d89d53e0f6c52429affcfda111d6c898d773ad27db1a5ccf593

    • Size

      384KB

    • MD5

      3a48f656083452bb90295887d03a0bb7

    • SHA1

      df6e8e2a31c4c16f5b77990b8e67141edebdd392

    • SHA256

      71ba084b59864d89d53e0f6c52429affcfda111d6c898d773ad27db1a5ccf593

    • SHA512

      3b04767a86d52e5d4602006b06d600bb2dff09f26501302b8df1e68384a15320419c1ce9acd09888079e23232d27b03c66fbbeba00940a11c8b3bf44a244f3b4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks