General

  • Target

    ef5e384775df9a31374aa2923cbf5cd68f24fad7231404f32d50c6173659090d

  • Size

    457KB

  • Sample

    220129-ns2ddaadej

  • MD5

    b9bdf01178bfe0f7023c5df9a967ec92

  • SHA1

    ddbb39d061e81bc868c390b646ff03db373f6a48

  • SHA256

    ef5e384775df9a31374aa2923cbf5cd68f24fad7231404f32d50c6173659090d

  • SHA512

    ad261c80ead4b1ff0fb94b728c0efbc97324d5f5545d3ecd7e89e232aa4ca3a56784ebbf45e6333a29599d0afdd920f83c401137648d4e304d44e660faef8adc

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Targets

    • Target

      ef5e384775df9a31374aa2923cbf5cd68f24fad7231404f32d50c6173659090d

    • Size

      457KB

    • MD5

      b9bdf01178bfe0f7023c5df9a967ec92

    • SHA1

      ddbb39d061e81bc868c390b646ff03db373f6a48

    • SHA256

      ef5e384775df9a31374aa2923cbf5cd68f24fad7231404f32d50c6173659090d

    • SHA512

      ad261c80ead4b1ff0fb94b728c0efbc97324d5f5545d3ecd7e89e232aa4ca3a56784ebbf45e6333a29599d0afdd920f83c401137648d4e304d44e660faef8adc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks