General

  • Target

    fe7317e150d9d56e00af5561789cde1e6cf7b7be0cfc3f07eec1e3c7b1de60f8

  • Size

    407KB

  • Sample

    220130-m6mlpsacbp

  • MD5

    a0df49eaeb53a1b18576a0c217999bd4

  • SHA1

    a15bb07b7eff810f3320fb342425b53be9e89d7f

  • SHA256

    fe7317e150d9d56e00af5561789cde1e6cf7b7be0cfc3f07eec1e3c7b1de60f8

  • SHA512

    8f67c505a2b467ebd2717485d79cc1ccaebcbd6626de8a8f60b7794bd6264e9659f4754384fb2bed2e3a86a9ba0e12aeceb529cffc795ea39dd3e46e6279adc5

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Targets

    • Target

      fe7317e150d9d56e00af5561789cde1e6cf7b7be0cfc3f07eec1e3c7b1de60f8

    • Size

      407KB

    • MD5

      a0df49eaeb53a1b18576a0c217999bd4

    • SHA1

      a15bb07b7eff810f3320fb342425b53be9e89d7f

    • SHA256

      fe7317e150d9d56e00af5561789cde1e6cf7b7be0cfc3f07eec1e3c7b1de60f8

    • SHA512

      8f67c505a2b467ebd2717485d79cc1ccaebcbd6626de8a8f60b7794bd6264e9659f4754384fb2bed2e3a86a9ba0e12aeceb529cffc795ea39dd3e46e6279adc5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks