General

  • Target

    d0493b8445b39746402fcad4e06e3850.exe

  • Size

    277KB

  • Sample

    220920-z1kw5saaap

  • MD5

    d0493b8445b39746402fcad4e06e3850

  • SHA1

    e28e7416bcc03a06dd290f20a0e71c9163439475

  • SHA256

    c94d30cedc3657bce5ed5a06633cb83adf6b18f253c6ced01462d0a891dd4123

  • SHA512

    0ff0edf8022868f074a3bdf4fc62cd631109c317d092415d5d62cc59e96bd0638901c8fee94ef1af6ceba0ffe08a1b092e6e60f3efdc087ab9dc8cfe845abe16

  • SSDEEP

    3072:narha5Q82U+ZvkPK4Vm17IF9I1vj+x69Cogn4Zk/pBj2ZQcNVWvmXWBx8N9wKIr+:eHU+yPA1Z1C8TgnIk32aNu4X7iC

Malware Config

Extracted

Family

redline

Botnet

Test

C2

46.18.107.225:6134

Attributes
  • auth_value

    670d22280e1d18e7a969eb0dd4e2f47c

Targets

    • Target

      d0493b8445b39746402fcad4e06e3850.exe

    • Size

      277KB

    • MD5

      d0493b8445b39746402fcad4e06e3850

    • SHA1

      e28e7416bcc03a06dd290f20a0e71c9163439475

    • SHA256

      c94d30cedc3657bce5ed5a06633cb83adf6b18f253c6ced01462d0a891dd4123

    • SHA512

      0ff0edf8022868f074a3bdf4fc62cd631109c317d092415d5d62cc59e96bd0638901c8fee94ef1af6ceba0ffe08a1b092e6e60f3efdc087ab9dc8cfe845abe16

    • SSDEEP

      3072:narha5Q82U+ZvkPK4Vm17IF9I1vj+x69Cogn4Zk/pBj2ZQcNVWvmXWBx8N9wKIr+:eHU+yPA1Z1C8TgnIk32aNu4X7iC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks