General

  • Target

    8b07bd8c8a48eb03cebcf4e13c7a272b97d248085e1221a115f07c157656d79b

  • Size

    466KB

  • Sample

    220213-jpggksheak

  • MD5

    7c81e79774d69a075a34fb5117d8c7dd

  • SHA1

    9408ad85991d624315767c33474fe29ab1bd5e90

  • SHA256

    8b07bd8c8a48eb03cebcf4e13c7a272b97d248085e1221a115f07c157656d79b

  • SHA512

    edfb1a001fb485312e7e0b301ef4058db67d072e9a0a8e7c6cc1e3cbfe8970b113dad14b94f69c315780fa2f5d7a3dcf7ed0874ba1fe3280f17de9d8077aaa1c

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Attributes
  • auth_value

    ee92d883673b7156fdd66cac5fc8d2d0

Targets

    • Target

      8b07bd8c8a48eb03cebcf4e13c7a272b97d248085e1221a115f07c157656d79b

    • Size

      466KB

    • MD5

      7c81e79774d69a075a34fb5117d8c7dd

    • SHA1

      9408ad85991d624315767c33474fe29ab1bd5e90

    • SHA256

      8b07bd8c8a48eb03cebcf4e13c7a272b97d248085e1221a115f07c157656d79b

    • SHA512

      edfb1a001fb485312e7e0b301ef4058db67d072e9a0a8e7c6cc1e3cbfe8970b113dad14b94f69c315780fa2f5d7a3dcf7ed0874ba1fe3280f17de9d8077aaa1c

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks