General

  • Target

    56B5E2BAB55DB6128F588D860065027C8F01E5ABECE0A.exe

  • Size

    104KB

  • Sample

    220129-lv3ywahfam

  • MD5

    d8c401e48b035837454fd9c4b8dfe3d1

  • SHA1

    50650c0fb8a95e2c13b1f3f708aa87309dde68d0

  • SHA256

    56b5e2bab55db6128f588d860065027c8f01e5abece0ace2c1d73b95c81b4583

  • SHA512

    6fa68652a13dd3ba3edcc3918acdf7d48eb226361a47facc3124a7ba2a631bc37e87bb148916faaf301c91f24bc773dabe84803ee23a02542dd80e83ce2e5743

Malware Config

Extracted

Family

redline

Botnet

privat3

C2

dorasandeau.xyz:81

teylerityah.xyz:81

leanaengama.xyz:81

Targets

    • Target

      56B5E2BAB55DB6128F588D860065027C8F01E5ABECE0A.exe

    • Size

      104KB

    • MD5

      d8c401e48b035837454fd9c4b8dfe3d1

    • SHA1

      50650c0fb8a95e2c13b1f3f708aa87309dde68d0

    • SHA256

      56b5e2bab55db6128f588d860065027c8f01e5abece0ace2c1d73b95c81b4583

    • SHA512

      6fa68652a13dd3ba3edcc3918acdf7d48eb226361a47facc3124a7ba2a631bc37e87bb148916faaf301c91f24bc773dabe84803ee23a02542dd80e83ce2e5743

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks