General

  • Target

    0d4661b289ff360a5f892b4e592b8f9f36997630e8143c6784f3479c9c7efbc5

  • Size

    445KB

  • Sample

    211022-ppk3nabfc3

  • MD5

    b6c1bd20ed0d07ea21b6fe4f459b97c4

  • SHA1

    8c2c3382f8ca4cd3f6fbc8a6f33602b87d0301e7

  • SHA256

    0d4661b289ff360a5f892b4e592b8f9f36997630e8143c6784f3479c9c7efbc5

  • SHA512

    17bac23c0957b4229b044a681c4814891c2d421a4c94224d3177685800d2c2529bdad59792c2deb1a6d17eb12b81b7e2a05e976ef46d2a8bf9a785c95884901e

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Targets

    • Target

      0d4661b289ff360a5f892b4e592b8f9f36997630e8143c6784f3479c9c7efbc5

    • Size

      445KB

    • MD5

      b6c1bd20ed0d07ea21b6fe4f459b97c4

    • SHA1

      8c2c3382f8ca4cd3f6fbc8a6f33602b87d0301e7

    • SHA256

      0d4661b289ff360a5f892b4e592b8f9f36997630e8143c6784f3479c9c7efbc5

    • SHA512

      17bac23c0957b4229b044a681c4814891c2d421a4c94224d3177685800d2c2529bdad59792c2deb1a6d17eb12b81b7e2a05e976ef46d2a8bf9a785c95884901e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks