General

  • Target

    8bbbecde4de02f67a459e33e94309e7c

  • Size

    461KB

  • Sample

    220928-f9v9pagcar

  • MD5

    8bbbecde4de02f67a459e33e94309e7c

  • SHA1

    455d5951f781eea64fe1a862d3d2747c1c703827

  • SHA256

    6821d655b36f63d4f2d83b3ca34c15e5ea0b6c3fc6346202806a41991b4fe36d

  • SHA512

    a069693c1e788f2ac763a4fd6d955b59b704e343a449858aa4f89ea9e56e89c63e7ed7e4c77a4f12bcc122f51cbc8113b67c9cc6d90432a0a77a3dbbc1350e79

  • SSDEEP

    12288:32/QpyL2DzEHxKTguPS0RgwaTNyURHMS:GdC/ECgOgwa4UiS

Malware Config

Extracted

Family

redline

Botnet

20220825

C2

80.87.192.249:16640

Attributes
  • auth_value

    27aa40395151b318c78ecf2834d1a5a0

Targets

    • Target

      8bbbecde4de02f67a459e33e94309e7c

    • Size

      461KB

    • MD5

      8bbbecde4de02f67a459e33e94309e7c

    • SHA1

      455d5951f781eea64fe1a862d3d2747c1c703827

    • SHA256

      6821d655b36f63d4f2d83b3ca34c15e5ea0b6c3fc6346202806a41991b4fe36d

    • SHA512

      a069693c1e788f2ac763a4fd6d955b59b704e343a449858aa4f89ea9e56e89c63e7ed7e4c77a4f12bcc122f51cbc8113b67c9cc6d90432a0a77a3dbbc1350e79

    • SSDEEP

      12288:32/QpyL2DzEHxKTguPS0RgwaTNyURHMS:GdC/ECgOgwa4UiS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks