General

  • Target

    7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

  • Size

    50KB

  • Sample

    221205-1tx4kaeb21

  • MD5

    710776db105e25c3d7ed891c43baa10a

  • SHA1

    a7dedbd5e708272c92511928c2a9e48a0279a774

  • SHA256

    5d76c9f277e722bef6b7ca41b00a801d6bc40d25786ca79ca42518f11e896fdf

  • SHA512

    d1bdcc2ee92362fd756b3fc2dafc6223719a188f558ee8eda5b06bc2f4f3329f461672407bc1bf4e40692ffcd08edeaf3287462df85bb74457e1258430d11a49

  • SSDEEP

    1536:TlB/8QE3LQALLcpWG3nRIisOyw2g/M4ra:Tb8/0ALopWG3zyDg/MJ

Malware Config

Extracted

Family

redline

Botnet

7777777

C2

185.106.92.214:2510

Attributes
  • auth_value

    963a3fad67ade8410f4a236f4101f611

Targets

    • Target

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • Size

      175KB

    • MD5

      3f52500b3f5b5c3fd52472cc3c82732e

    • SHA1

      2f6ad3c03bb75104395c13f24f71a2292071c93b

    • SHA256

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • SHA512

      c65978b53a8a60035bb2ee368bf7f6d5e8b195f0e99aec027320d95eaa037b255349b226db5f7412014f847f45b8cb75f462ab52049ac8f9b9292ca01df9456a

    • SSDEEP

      3072:zxqZWf7aNQYF8Hx3IeJve/t9FhZPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO2:FqZ2Hx3ZJuFh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks