General

  • Target

    111

  • Size

    4.9MB

  • Sample

    220805-qp4qfadcb4

  • MD5

    f4baf22ddb455707b91fec0ee48257fc

  • SHA1

    cd67e9d5e6d566e27af68592c85afad853e7ae97

  • SHA256

    79fd5a7e4a09042cae5f0f54233085f35135051a5ba3845a4ffbf740e160205a

  • SHA512

    d6dc37d9de540e2c2b7b7c97b5e7b9e9929703cfc47d64cdfcc2871d53bc0981b93a90eafb4e15caffe7886d89d797aba69bada36aefff1f827b964b63ad1b66

Malware Config

Extracted

Family

redline

Botnet

Mount2

C2

ushatamaiet.xyz:80

adinoreiver.xyz:80

qulyneanica.com:80

Attributes
  • auth_value

    041a7c36d4c8d195af1a8b950182ee96

Targets

    • Target

      111

    • Size

      4.9MB

    • MD5

      f4baf22ddb455707b91fec0ee48257fc

    • SHA1

      cd67e9d5e6d566e27af68592c85afad853e7ae97

    • SHA256

      79fd5a7e4a09042cae5f0f54233085f35135051a5ba3845a4ffbf740e160205a

    • SHA512

      d6dc37d9de540e2c2b7b7c97b5e7b9e9929703cfc47d64cdfcc2871d53bc0981b93a90eafb4e15caffe7886d89d797aba69bada36aefff1f827b964b63ad1b66

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks