General

  • Target

    7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

  • Size

    50KB

  • Sample

    221205-15bdyafb6y

  • MD5

    fdfc7d431bab89e544eb91c26979d9ba

  • SHA1

    8a31f03cba23bd4985c36f975235a43dad1cc393

  • SHA256

    5c5c8eb7f7e89ad485dd5ed4c7636b3e3bb92054f5ec1ca2867ebe46fa2e7579

  • SHA512

    4bd0dc11b7adf36bd64ebfa8b9e72bc2e79fe9609a6ca44b22378affee146d6035ec835b8531ea6d793a174e4ba118e603e5df0580d61a1001936168b8cb7e9c

  • SSDEEP

    1536:+lB/8QE3LQALLcpWG3nRIisOyw2g/M4r3:+b8/0ALopWG3zyDg/MA

Malware Config

Extracted

Family

redline

Botnet

7777777

C2

185.106.92.214:2510

Attributes
  • auth_value

    963a3fad67ade8410f4a236f4101f611

Targets

    • Target

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • Size

      175KB

    • MD5

      3f52500b3f5b5c3fd52472cc3c82732e

    • SHA1

      2f6ad3c03bb75104395c13f24f71a2292071c93b

    • SHA256

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • SHA512

      c65978b53a8a60035bb2ee368bf7f6d5e8b195f0e99aec027320d95eaa037b255349b226db5f7412014f847f45b8cb75f462ab52049ac8f9b9292ca01df9456a

    • SSDEEP

      3072:zxqZWf7aNQYF8Hx3IeJve/t9FhZPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO2:FqZ2Hx3ZJuFh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks