General

  • Target

    2a385dabed89e71e12a5ab8b2e3c94cc

  • Size

    397KB

  • Sample

    221003-c7f57seccp

  • MD5

    2a385dabed89e71e12a5ab8b2e3c94cc

  • SHA1

    153c3e9e0892b98667280b80131b85cb67ce1826

  • SHA256

    104c6e38add483533c2c7b42e9c6cbd02cf8549d554c6f8f354d3a33b3e0b798

  • SHA512

    17fe21e78e7e648032e8a77fe4865fb7cac717616a746565e6081f17e997603ff78ce70f4bad793fa3d6ab6034b3e829f175bc78b598bf92ba8ba19132d49f2d

  • SSDEEP

    6144:AG3fqGDJkVD+lQr5kGaGrFQhVud3BF5rByyoUJv2TSFaOyzUdLAirbRrIm:AGiGtuSlQr5kGaGGh8pBPoUJJyYJ5rI

Malware Config

Extracted

Family

redline

Botnet

20220906

C2

65.108.122.145:16640

Attributes
  • auth_value

    7b3331507aa7ce65c90e3c77aa238bd8

Targets

    • Target

      2a385dabed89e71e12a5ab8b2e3c94cc

    • Size

      397KB

    • MD5

      2a385dabed89e71e12a5ab8b2e3c94cc

    • SHA1

      153c3e9e0892b98667280b80131b85cb67ce1826

    • SHA256

      104c6e38add483533c2c7b42e9c6cbd02cf8549d554c6f8f354d3a33b3e0b798

    • SHA512

      17fe21e78e7e648032e8a77fe4865fb7cac717616a746565e6081f17e997603ff78ce70f4bad793fa3d6ab6034b3e829f175bc78b598bf92ba8ba19132d49f2d

    • SSDEEP

      6144:AG3fqGDJkVD+lQr5kGaGrFQhVud3BF5rByyoUJv2TSFaOyzUdLAirbRrIm:AGiGtuSlQr5kGaGGh8pBPoUJJyYJ5rI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks