General

  • Target

    1dedd29d4c3bf33035bbb674c86b5bc7cfde37c591fb14910313f2f53a32de72

  • Size

    385KB

  • Sample

    211021-2yzcvsbgfl

  • MD5

    9b64b74a63fc666bc826461ee4b68ed7

  • SHA1

    ef1b8434a202ce8b4e4e2ef7e72c28531154e724

  • SHA256

    1dedd29d4c3bf33035bbb674c86b5bc7cfde37c591fb14910313f2f53a32de72

  • SHA512

    a20ecbe7d9bd2ff2b9e085f24ca6427f4ef60cc9aef31daa99890bbd0d5bf188a55e6d2596e9021f1ebdf380fa4552c4e12efea8d46f87c3ce81bdf3eed20686

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Targets

    • Target

      1dedd29d4c3bf33035bbb674c86b5bc7cfde37c591fb14910313f2f53a32de72

    • Size

      385KB

    • MD5

      9b64b74a63fc666bc826461ee4b68ed7

    • SHA1

      ef1b8434a202ce8b4e4e2ef7e72c28531154e724

    • SHA256

      1dedd29d4c3bf33035bbb674c86b5bc7cfde37c591fb14910313f2f53a32de72

    • SHA512

      a20ecbe7d9bd2ff2b9e085f24ca6427f4ef60cc9aef31daa99890bbd0d5bf188a55e6d2596e9021f1ebdf380fa4552c4e12efea8d46f87c3ce81bdf3eed20686

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks