General

  • Target

    564722cb4d9b0a99dea3c9fca0fd2fa31e88404f306d2c94e2fb60c91e856f1a

  • Size

    399KB

  • Sample

    220130-qd1jmscba7

  • MD5

    076fdc91cb1d050c18d59db078ce1831

  • SHA1

    ae8c9b087a3eb80b16964305d071dde85e928c7c

  • SHA256

    564722cb4d9b0a99dea3c9fca0fd2fa31e88404f306d2c94e2fb60c91e856f1a

  • SHA512

    75800cdc3b8ae9ea7a55ad99c7c0da99cd7aaab659e2d860adee3323731f02dcfdc9fed2e71e2ff04f54319257ff8539e01a38927538ec8ba03d64933ace4c9d

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Targets

    • Target

      564722cb4d9b0a99dea3c9fca0fd2fa31e88404f306d2c94e2fb60c91e856f1a

    • Size

      399KB

    • MD5

      076fdc91cb1d050c18d59db078ce1831

    • SHA1

      ae8c9b087a3eb80b16964305d071dde85e928c7c

    • SHA256

      564722cb4d9b0a99dea3c9fca0fd2fa31e88404f306d2c94e2fb60c91e856f1a

    • SHA512

      75800cdc3b8ae9ea7a55ad99c7c0da99cd7aaab659e2d860adee3323731f02dcfdc9fed2e71e2ff04f54319257ff8539e01a38927538ec8ba03d64933ace4c9d

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks