General

  • Target

    980e9b1b9c2fd867deb0255a56d8111cba4e4eef61a08dae39f95f5b45016cff

  • Size

    407KB

  • Sample

    220330-lktbpabch6

  • MD5

    2e0eb4b37ce7082fedef3637e225f1e0

  • SHA1

    f0d9159e7b6f188ca337732ce7ec07ff4f39d00e

  • SHA256

    980e9b1b9c2fd867deb0255a56d8111cba4e4eef61a08dae39f95f5b45016cff

  • SHA512

    89ce3a668e1fa878d8f60eaf1e49fbe134d13bd4c4d84a4aef1e9f35ae4c604f01d7526eca566956b68b77a86fdb247b50fc9c51ce273082d942f36601fcc0f5

Malware Config

Extracted

Family

redline

Botnet

NEW_YEAR_BTC

C2

86.105.252.12:35200

Targets

    • Target

      980e9b1b9c2fd867deb0255a56d8111cba4e4eef61a08dae39f95f5b45016cff

    • Size

      407KB

    • MD5

      2e0eb4b37ce7082fedef3637e225f1e0

    • SHA1

      f0d9159e7b6f188ca337732ce7ec07ff4f39d00e

    • SHA256

      980e9b1b9c2fd867deb0255a56d8111cba4e4eef61a08dae39f95f5b45016cff

    • SHA512

      89ce3a668e1fa878d8f60eaf1e49fbe134d13bd4c4d84a4aef1e9f35ae4c604f01d7526eca566956b68b77a86fdb247b50fc9c51ce273082d942f36601fcc0f5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks