General

  • Target

    70a5c13cfe466503802918e5710256c80529a8702f500994e95754705961019b

  • Size

    438KB

  • Sample

    220121-eda37sdccm

  • MD5

    cf7333d9e77df7ba1952081e9810b853

  • SHA1

    0e0f8986eb9adb35d2105988fe3836abb7b260a4

  • SHA256

    70a5c13cfe466503802918e5710256c80529a8702f500994e95754705961019b

  • SHA512

    4e49ea9860138fd09d5c337afb18614ce9a049283f51014b4bdc3b4648e597aefdf469bd88b1f9b87a93648d94693230438fdd8a6496de3bf6b3d19a688197c9

Malware Config

Extracted

Family

redline

Botnet

NONAME

C2

45.9.20.111:1355

Targets

    • Target

      70a5c13cfe466503802918e5710256c80529a8702f500994e95754705961019b

    • Size

      438KB

    • MD5

      cf7333d9e77df7ba1952081e9810b853

    • SHA1

      0e0f8986eb9adb35d2105988fe3836abb7b260a4

    • SHA256

      70a5c13cfe466503802918e5710256c80529a8702f500994e95754705961019b

    • SHA512

      4e49ea9860138fd09d5c337afb18614ce9a049283f51014b4bdc3b4648e597aefdf469bd88b1f9b87a93648d94693230438fdd8a6496de3bf6b3d19a688197c9

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks