General

  • Target

    b5d53ee727c9e0c28f38a7c2ac429c5162d714d2f7b9c1b385f8a3b7f690519b

  • Size

    457KB

  • Sample

    220129-erba5acfcl

  • MD5

    78d229b0e01e94ba3939195775cb2424

  • SHA1

    a76d8970224973e7d42b8ea2fc161f5c1b896aaf

  • SHA256

    b5d53ee727c9e0c28f38a7c2ac429c5162d714d2f7b9c1b385f8a3b7f690519b

  • SHA512

    f4f9d0f160f13058e8e1a14df56d2de91d9324012d1d060052022f94ca1ed120693f7c2c273aeda9ac1388a3acbd0cf1b39ddbfe14fe6a93543dfc8172623bd0

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Targets

    • Target

      b5d53ee727c9e0c28f38a7c2ac429c5162d714d2f7b9c1b385f8a3b7f690519b

    • Size

      457KB

    • MD5

      78d229b0e01e94ba3939195775cb2424

    • SHA1

      a76d8970224973e7d42b8ea2fc161f5c1b896aaf

    • SHA256

      b5d53ee727c9e0c28f38a7c2ac429c5162d714d2f7b9c1b385f8a3b7f690519b

    • SHA512

      f4f9d0f160f13058e8e1a14df56d2de91d9324012d1d060052022f94ca1ed120693f7c2c273aeda9ac1388a3acbd0cf1b39ddbfe14fe6a93543dfc8172623bd0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks