General

  • Target

    38d11f96418f69c3736d1a683a76d4d3b827b9fcbc29a53d4f6cfef30327fed7

  • Size

    384KB

  • Sample

    211015-d2nhrsaed2

  • MD5

    6f79e75863a1069cce841c294dc6ea7e

  • SHA1

    2c928d33f7b49dc5288320702a4af79cd8454047

  • SHA256

    38d11f96418f69c3736d1a683a76d4d3b827b9fcbc29a53d4f6cfef30327fed7

  • SHA512

    0e717f4bdcf5055314fa76c5784596df9c494a9ce0ea3e50632b79eb1fe5204cadf40e2387d9ddc5adfcd083fc03ab2b3c28121514bdd6d7683ebd4898803484

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      38d11f96418f69c3736d1a683a76d4d3b827b9fcbc29a53d4f6cfef30327fed7

    • Size

      384KB

    • MD5

      6f79e75863a1069cce841c294dc6ea7e

    • SHA1

      2c928d33f7b49dc5288320702a4af79cd8454047

    • SHA256

      38d11f96418f69c3736d1a683a76d4d3b827b9fcbc29a53d4f6cfef30327fed7

    • SHA512

      0e717f4bdcf5055314fa76c5784596df9c494a9ce0ea3e50632b79eb1fe5204cadf40e2387d9ddc5adfcd083fc03ab2b3c28121514bdd6d7683ebd4898803484

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks