General

  • Target

    8c72f46dc4cafb6e1b3a928252e88225d8e5ee7ddf1727836296bcb00278043f

  • Size

    384KB

  • Sample

    211015-cpvkwaadh4

  • MD5

    9bd48946659650f06d3b4f1ddfb5094f

  • SHA1

    64d4049eb20a6f7b53d5253c4d657a427bb82283

  • SHA256

    8c72f46dc4cafb6e1b3a928252e88225d8e5ee7ddf1727836296bcb00278043f

  • SHA512

    71f8835913b229fb795d7cf37784c3fbe99f22ca9e8ee1b80a9b7bd2b23567588d359bdbfe01afd3cc6609e2a55af3c7cda6cf68675e40648a15ac03b1619d14

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      8c72f46dc4cafb6e1b3a928252e88225d8e5ee7ddf1727836296bcb00278043f

    • Size

      384KB

    • MD5

      9bd48946659650f06d3b4f1ddfb5094f

    • SHA1

      64d4049eb20a6f7b53d5253c4d657a427bb82283

    • SHA256

      8c72f46dc4cafb6e1b3a928252e88225d8e5ee7ddf1727836296bcb00278043f

    • SHA512

      71f8835913b229fb795d7cf37784c3fbe99f22ca9e8ee1b80a9b7bd2b23567588d359bdbfe01afd3cc6609e2a55af3c7cda6cf68675e40648a15ac03b1619d14

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks