General

  • Target

    171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7

  • Size

    279KB

  • Sample

    220326-plq5hahbek

  • MD5

    753f89182804233389d9257938bc9e6b

  • SHA1

    31cbf420a6dceea0d4a30163db9587d8ae99c03f

  • SHA256

    171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7

  • SHA512

    1c4028499e62c86aa6be55c1a2c2a0327c9a61b6a71c5aff4d1a2001d4ce753b46391aa1687378a13407c26b5b7bc853ac924fa7afa117337613bc4e1f753591

Malware Config

Extracted

Family

redline

Botnet

NEW_YEAR_BTC

C2

86.105.252.12:35200

Targets

    • Target

      171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7

    • Size

      279KB

    • MD5

      753f89182804233389d9257938bc9e6b

    • SHA1

      31cbf420a6dceea0d4a30163db9587d8ae99c03f

    • SHA256

      171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7

    • SHA512

      1c4028499e62c86aa6be55c1a2c2a0327c9a61b6a71c5aff4d1a2001d4ce753b46391aa1687378a13407c26b5b7bc853ac924fa7afa117337613bc4e1f753591

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks