General

  • Target

    94c79d5855d3ec810373edf8ccd4e20e1e91d88dacac3b65dd74625b92776b53

  • Size

    386KB

  • Sample

    211022-f667sabbd9

  • MD5

    40ba9efba03397f36a7873482150b619

  • SHA1

    f66106ed914d41e085900cb3c2cfad25213327d6

  • SHA256

    94c79d5855d3ec810373edf8ccd4e20e1e91d88dacac3b65dd74625b92776b53

  • SHA512

    7c401153fc936f3cb63c024603d418661c926db75c4f9fd8fdba091eb8e954ee8b994ec235c017bb2f93606a84c9c2a6e43daefac4c84c589890d808020c23c2

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Targets

    • Target

      94c79d5855d3ec810373edf8ccd4e20e1e91d88dacac3b65dd74625b92776b53

    • Size

      386KB

    • MD5

      40ba9efba03397f36a7873482150b619

    • SHA1

      f66106ed914d41e085900cb3c2cfad25213327d6

    • SHA256

      94c79d5855d3ec810373edf8ccd4e20e1e91d88dacac3b65dd74625b92776b53

    • SHA512

      7c401153fc936f3cb63c024603d418661c926db75c4f9fd8fdba091eb8e954ee8b994ec235c017bb2f93606a84c9c2a6e43daefac4c84c589890d808020c23c2

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks