General

  • Target

    a78131af458274c3ea4932ce84ebd22de1d3965b7d7ce6b011c0ba7efcb6a0fa

  • Size

    470KB

  • Sample

    220213-jyghyahfap

  • MD5

    7bae38a784bd23a220f972285d052c3b

  • SHA1

    40301377e05a681caac42cabc9ae668d512d2514

  • SHA256

    a78131af458274c3ea4932ce84ebd22de1d3965b7d7ce6b011c0ba7efcb6a0fa

  • SHA512

    2e0b63018bf171225b44732a24030214bb4ebd30c10c84e2a100ff721a002cf09a310f994d509c541df7441107dbd30cfcf8714c022a7391f4c55835ae422ab7

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Attributes
  • auth_value

    44e87155dd7a4d1957a956ed040ff3fd

Targets

    • Target

      a78131af458274c3ea4932ce84ebd22de1d3965b7d7ce6b011c0ba7efcb6a0fa

    • Size

      470KB

    • MD5

      7bae38a784bd23a220f972285d052c3b

    • SHA1

      40301377e05a681caac42cabc9ae668d512d2514

    • SHA256

      a78131af458274c3ea4932ce84ebd22de1d3965b7d7ce6b011c0ba7efcb6a0fa

    • SHA512

      2e0b63018bf171225b44732a24030214bb4ebd30c10c84e2a100ff721a002cf09a310f994d509c541df7441107dbd30cfcf8714c022a7391f4c55835ae422ab7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks