General

  • Target

    ca5f98d3fd75114148a7fc26d4ff0831460e50e85cd9c314570de1b0cf564397

  • Size

    405KB

  • Sample

    220524-h147cafgb4

  • MD5

    0d5746e65671d65faf92990f41d509aa

  • SHA1

    62bb7603df4a3add66e30209941295afd439573e

  • SHA256

    ca5f98d3fd75114148a7fc26d4ff0831460e50e85cd9c314570de1b0cf564397

  • SHA512

    960354bc4b119718ae810b02efdbbf53550b7871bae2c1dc04929b563a10785fefa070778d696b2359a7df36c5a9adb131c4c0dd40f7cfc8284462ab14ed3c6e

Malware Config

Extracted

Family

redline

Botnet

test1

C2

185.215.113.75:80

Attributes
  • auth_value

    7ab4a4e2eae9eb7ae10f64f68df53bb3

Targets

    • Target

      ca5f98d3fd75114148a7fc26d4ff0831460e50e85cd9c314570de1b0cf564397

    • Size

      405KB

    • MD5

      0d5746e65671d65faf92990f41d509aa

    • SHA1

      62bb7603df4a3add66e30209941295afd439573e

    • SHA256

      ca5f98d3fd75114148a7fc26d4ff0831460e50e85cd9c314570de1b0cf564397

    • SHA512

      960354bc4b119718ae810b02efdbbf53550b7871bae2c1dc04929b563a10785fefa070778d696b2359a7df36c5a9adb131c4c0dd40f7cfc8284462ab14ed3c6e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks