General

  • Target

    0x0006000000022e9c-225.dat

  • Size

    107KB

  • Sample

    221006-ltrt8aghg9

  • MD5

    59ec0d84dfa73c1ef7501ad6f97f8d6f

  • SHA1

    46cfc8000022f90c1a3ce2e0ff08d8ba5b8dfa49

  • SHA256

    8cc6e08053bb8d9386ae9484023c2ec7345bcf1b710691926e1d7194c7f4971d

  • SHA512

    8865d8084aef3aee8bd2fdc7c492592567620ecb828491ffc0ef73a1a32299ca8e0768edced32ab0dbf38f5dacf79fb44747074f7acaedeac2f7070cb94d1bbd

  • SSDEEP

    3072:0cvFBgCYdpicIW1HJeyHFxNrtQccmjQnh04EASN6:0cv+Q5yHJScSnh04jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

h

C2

185.106.92.139:16578

Attributes
  • auth_value

    d5aafe5ab67bae4a3f7cda3b2e30f9b7

Targets

    • Target

      0x0006000000022e9c-225.dat

    • Size

      107KB

    • MD5

      59ec0d84dfa73c1ef7501ad6f97f8d6f

    • SHA1

      46cfc8000022f90c1a3ce2e0ff08d8ba5b8dfa49

    • SHA256

      8cc6e08053bb8d9386ae9484023c2ec7345bcf1b710691926e1d7194c7f4971d

    • SHA512

      8865d8084aef3aee8bd2fdc7c492592567620ecb828491ffc0ef73a1a32299ca8e0768edced32ab0dbf38f5dacf79fb44747074f7acaedeac2f7070cb94d1bbd

    • SSDEEP

      3072:0cvFBgCYdpicIW1HJeyHFxNrtQccmjQnh04EASN6:0cv+Q5yHJScSnh04jS

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks