General

  • Target

    dab23a9c3c97d24b99b0ee0b9c66cff343fbead9f5be87ffce82abf9df424931

  • Size

    366KB

  • Sample

    211015-gqb75saeh8

  • MD5

    021dbc2b8ee7aa146f9bd0512fd5b5d9

  • SHA1

    7f8c3c3c8b70175b6973109cf623f1585e77c6b4

  • SHA256

    dab23a9c3c97d24b99b0ee0b9c66cff343fbead9f5be87ffce82abf9df424931

  • SHA512

    be467e163912b8c7b38bba210d1b9f5ea48957aa0cd40228b44449b4ce389f53f1e1cedee0302ea9cd9102617c151a69efac34360d3fd6308f9900f479ea827d

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      dab23a9c3c97d24b99b0ee0b9c66cff343fbead9f5be87ffce82abf9df424931

    • Size

      366KB

    • MD5

      021dbc2b8ee7aa146f9bd0512fd5b5d9

    • SHA1

      7f8c3c3c8b70175b6973109cf623f1585e77c6b4

    • SHA256

      dab23a9c3c97d24b99b0ee0b9c66cff343fbead9f5be87ffce82abf9df424931

    • SHA512

      be467e163912b8c7b38bba210d1b9f5ea48957aa0cd40228b44449b4ce389f53f1e1cedee0302ea9cd9102617c151a69efac34360d3fd6308f9900f479ea827d

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks