General

  • Target

    242b509f01baf426d158d3595187d83fea1d5a36604e60b75bbda9e5713d360c

  • Size

    385KB

  • Sample

    211022-ekqggacabn

  • MD5

    f705c9f6de75a0b65f9175df4b266a09

  • SHA1

    bc98fadbe3532ab0ccb497c9fea52d5ab515c039

  • SHA256

    242b509f01baf426d158d3595187d83fea1d5a36604e60b75bbda9e5713d360c

  • SHA512

    2a88a1c1f7c00c290150143146cdb3bb3daacfbb03bc47b4d858c45f4cfcd2469d9e2634d5694f0b551c716781add87b64b052c0cc6f183b56dd28cf68a5d3f6

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Targets

    • Target

      242b509f01baf426d158d3595187d83fea1d5a36604e60b75bbda9e5713d360c

    • Size

      385KB

    • MD5

      f705c9f6de75a0b65f9175df4b266a09

    • SHA1

      bc98fadbe3532ab0ccb497c9fea52d5ab515c039

    • SHA256

      242b509f01baf426d158d3595187d83fea1d5a36604e60b75bbda9e5713d360c

    • SHA512

      2a88a1c1f7c00c290150143146cdb3bb3daacfbb03bc47b4d858c45f4cfcd2469d9e2634d5694f0b551c716781add87b64b052c0cc6f183b56dd28cf68a5d3f6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks