General

  • Target

    b8c4b3585720e7b7f82ccfe11ca8d64bb8bfda3ef8d0bc8d068daaa0ac1ed5d5

  • Size

    430KB

  • Sample

    220129-ye8kmshag4

  • MD5

    3a470123b75e000c545d3f4e966c805e

  • SHA1

    97eb72bcbb0706a862696e4b07f3176623384595

  • SHA256

    b8c4b3585720e7b7f82ccfe11ca8d64bb8bfda3ef8d0bc8d068daaa0ac1ed5d5

  • SHA512

    544dba560d569d00660f487b82184bb93965d1d76909537396801dcb3bd4d6cac60dc75afebd44307fa382442ce63f25454eda7806306632ef94313e33eedf4a

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Targets

    • Target

      b8c4b3585720e7b7f82ccfe11ca8d64bb8bfda3ef8d0bc8d068daaa0ac1ed5d5

    • Size

      430KB

    • MD5

      3a470123b75e000c545d3f4e966c805e

    • SHA1

      97eb72bcbb0706a862696e4b07f3176623384595

    • SHA256

      b8c4b3585720e7b7f82ccfe11ca8d64bb8bfda3ef8d0bc8d068daaa0ac1ed5d5

    • SHA512

      544dba560d569d00660f487b82184bb93965d1d76909537396801dcb3bd4d6cac60dc75afebd44307fa382442ce63f25454eda7806306632ef94313e33eedf4a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks