General

  • Target

    34d9b0bc706b0817a9a6583551a06e34aa984f280cb3dc6a9d79dcb994b9395a

  • Size

    407KB

  • Sample

    220326-mkvp7abeh9

  • MD5

    959ece0da8345ec7067d70f30d91cc88

  • SHA1

    4271bc040e7100218694c474f7f621e2e810e9d8

  • SHA256

    34d9b0bc706b0817a9a6583551a06e34aa984f280cb3dc6a9d79dcb994b9395a

  • SHA512

    ff8dc1edaa2f79ab9d6816e8bb02ddbeb9c61a752a47214b7cd6259b68203458425ed36a9b379a6b6e1b17a25746da655b3411356884b2232c7a9500ef115bce

Malware Config

Extracted

Family

redline

Botnet

NEW_YEAR_BTC

C2

86.105.252.12:35200

Targets

    • Target

      34d9b0bc706b0817a9a6583551a06e34aa984f280cb3dc6a9d79dcb994b9395a

    • Size

      407KB

    • MD5

      959ece0da8345ec7067d70f30d91cc88

    • SHA1

      4271bc040e7100218694c474f7f621e2e810e9d8

    • SHA256

      34d9b0bc706b0817a9a6583551a06e34aa984f280cb3dc6a9d79dcb994b9395a

    • SHA512

      ff8dc1edaa2f79ab9d6816e8bb02ddbeb9c61a752a47214b7cd6259b68203458425ed36a9b379a6b6e1b17a25746da655b3411356884b2232c7a9500ef115bce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks