General

  • Target

    8ab3e5ce3fb72b8e6e14a4833a40107a094f6dbfbeceacefabb4f6902621b66e

  • Size

    366KB

  • Sample

    211015-nfj9bsagg8

  • MD5

    af51b8540aa449e88b8ff15e03986952

  • SHA1

    53bbebc63b3aaf4bc92f2b9c0766f470744cf011

  • SHA256

    8ab3e5ce3fb72b8e6e14a4833a40107a094f6dbfbeceacefabb4f6902621b66e

  • SHA512

    bfe913952baf8cfa3615ea6f5d1ae1b6ef881ca058e8dc9eea781bdb4a519a5d13e60ca989a34e857e10d50aaaa9e3d0e8fc339498d2571789c844f036fdba5e

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Targets

    • Target

      8ab3e5ce3fb72b8e6e14a4833a40107a094f6dbfbeceacefabb4f6902621b66e

    • Size

      366KB

    • MD5

      af51b8540aa449e88b8ff15e03986952

    • SHA1

      53bbebc63b3aaf4bc92f2b9c0766f470744cf011

    • SHA256

      8ab3e5ce3fb72b8e6e14a4833a40107a094f6dbfbeceacefabb4f6902621b66e

    • SHA512

      bfe913952baf8cfa3615ea6f5d1ae1b6ef881ca058e8dc9eea781bdb4a519a5d13e60ca989a34e857e10d50aaaa9e3d0e8fc339498d2571789c844f036fdba5e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks