General

  • Target

    8ce2112765fe323f2ca702844a34d11f50818e44cfd91fb5a6bab523ff841fc2

  • Size

    466KB

  • Sample

    220213-es3f1afeep

  • MD5

    678efc7fabdfef639dc1f37b3cc08494

  • SHA1

    1e18c049c3219d46c7ef0e446a72e2fb166a958b

  • SHA256

    8ce2112765fe323f2ca702844a34d11f50818e44cfd91fb5a6bab523ff841fc2

  • SHA512

    dd58826621dcd0e364100c31b098fc00f4481eba635699576ea7b990ec4c7b25ad7d24c14deba784ec89224c2a463a4d6a6f018ef7af1444961d82b05d0aecec

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      8ce2112765fe323f2ca702844a34d11f50818e44cfd91fb5a6bab523ff841fc2

    • Size

      466KB

    • MD5

      678efc7fabdfef639dc1f37b3cc08494

    • SHA1

      1e18c049c3219d46c7ef0e446a72e2fb166a958b

    • SHA256

      8ce2112765fe323f2ca702844a34d11f50818e44cfd91fb5a6bab523ff841fc2

    • SHA512

      dd58826621dcd0e364100c31b098fc00f4481eba635699576ea7b990ec4c7b25ad7d24c14deba784ec89224c2a463a4d6a6f018ef7af1444961d82b05d0aecec

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks