General

  • Target

    9baaddb7f0614fe103a70452dde6060c1d224c1782a2138563a48cf42def0517

  • Size

    384KB

  • Sample

    220212-fkbtrahgek

  • MD5

    07df243ab49c4ff77831f01eb43c386a

  • SHA1

    0d3acd994192db3859b83d7d6f1ac66406766e8c

  • SHA256

    9baaddb7f0614fe103a70452dde6060c1d224c1782a2138563a48cf42def0517

  • SHA512

    b5664c73df25e4d71365cefedb8568dabddb82684cb7f175572eba2ca95af5d9ae3a6a2f3b01a8d366e95f3f84c3e4dfccbc948d77995d799418c34ac63b6bda

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Attributes
  • auth_value

    ee92d883673b7156fdd66cac5fc8d2d0

Targets

    • Target

      9baaddb7f0614fe103a70452dde6060c1d224c1782a2138563a48cf42def0517

    • Size

      384KB

    • MD5

      07df243ab49c4ff77831f01eb43c386a

    • SHA1

      0d3acd994192db3859b83d7d6f1ac66406766e8c

    • SHA256

      9baaddb7f0614fe103a70452dde6060c1d224c1782a2138563a48cf42def0517

    • SHA512

      b5664c73df25e4d71365cefedb8568dabddb82684cb7f175572eba2ca95af5d9ae3a6a2f3b01a8d366e95f3f84c3e4dfccbc948d77995d799418c34ac63b6bda

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks