General

  • Target

    3d5b50351190b7263f56c6e2e59ae06ee3b7803b62b1c91f371ee007670ee2fd

  • Size

    2.0MB

  • Sample

    220222-zn1f3aehan

  • MD5

    e2372896271ff5d1257c1b9d2eb03de4

  • SHA1

    3ec82f1186cd323b197650626e4c426c279cb7fc

  • SHA256

    3d5b50351190b7263f56c6e2e59ae06ee3b7803b62b1c91f371ee007670ee2fd

  • SHA512

    eb8fc5a8f106c49cc3df6a397ccf83c078ba7bf56ce11d564395ffe1e663dc3c56827c77975052a83b57ef09076bcaebfe253b6bc587cb9b85466d40b22257b4

Malware Config

Extracted

Family

redline

Botnet

alltop

C2

karinianise.xyz:80

Attributes
  • auth_value

    6fadc2b44b16945c8f721b77e484a725

Targets

    • Target

      3d5b50351190b7263f56c6e2e59ae06ee3b7803b62b1c91f371ee007670ee2fd

    • Size

      2.0MB

    • MD5

      e2372896271ff5d1257c1b9d2eb03de4

    • SHA1

      3ec82f1186cd323b197650626e4c426c279cb7fc

    • SHA256

      3d5b50351190b7263f56c6e2e59ae06ee3b7803b62b1c91f371ee007670ee2fd

    • SHA512

      eb8fc5a8f106c49cc3df6a397ccf83c078ba7bf56ce11d564395ffe1e663dc3c56827c77975052a83b57ef09076bcaebfe253b6bc587cb9b85466d40b22257b4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks