General

  • Target

    5582_1647892436_8862.exe

  • Size

    172KB

  • Sample

    220325-h8fhysbga6

  • MD5

    bbc9b2e32cd420063e28f97a2c0120e5

  • SHA1

    0e8253c7f0d1d82ad299e3301b12f649c7074297

  • SHA256

    b7a2b920675c8bef9335ba279317eb15ddfa6961feccc08c1a99e3d2ff8e34c1

  • SHA512

    2e8bf7d5dc406f2b0afd67e2a35805307da8930ace805ceeaff67b33258f2849decdaa59a48e9af9ac66d97803b1d27179e8c803ef86c63864e1aac418759581

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

20.53.13.165:3335

Attributes
  • auth_value

    7ed907c60301a0aea12a58314db264f5

Targets

    • Target

      5582_1647892436_8862.exe

    • Size

      172KB

    • MD5

      bbc9b2e32cd420063e28f97a2c0120e5

    • SHA1

      0e8253c7f0d1d82ad299e3301b12f649c7074297

    • SHA256

      b7a2b920675c8bef9335ba279317eb15ddfa6961feccc08c1a99e3d2ff8e34c1

    • SHA512

      2e8bf7d5dc406f2b0afd67e2a35805307da8930ace805ceeaff67b33258f2849decdaa59a48e9af9ac66d97803b1d27179e8c803ef86c63864e1aac418759581

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks