General

  • Target

    7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

  • Size

    50KB

  • Sample

    221207-cqhygahh7x

  • MD5

    927a6edcc292bd21d201f56601c80fc2

  • SHA1

    3af502eaea16dd850349b90b704a8c3e137e2ecb

  • SHA256

    e8a448efa1f1fae205cdbe02c9392aa0dcf9c3d7c2ff2adb2480f8f02f38a136

  • SHA512

    a5a3bffc8e847a9cea9eee1e7d1ac33ef556f0746df63bed934d6950de5926c6a3b901fd37a5fbef8ee14a81130d67360a985e022930b0c3356630cd81b5a45d

  • SSDEEP

    1536:dlB/8QE3LQALLcpWG3nRIisOyw2g/M4r8:db8/0ALopWG3zyDg/MP

Malware Config

Extracted

Family

redline

Botnet

7777777

C2

185.106.92.214:2510

Attributes
  • auth_value

    963a3fad67ade8410f4a236f4101f611

Targets

    • Target

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • Size

      175KB

    • MD5

      3f52500b3f5b5c3fd52472cc3c82732e

    • SHA1

      2f6ad3c03bb75104395c13f24f71a2292071c93b

    • SHA256

      7d1b267f53db09f05ccf77a35c93abeb4918f76e1439cc049074845271b10ec2

    • SHA512

      c65978b53a8a60035bb2ee368bf7f6d5e8b195f0e99aec027320d95eaa037b255349b226db5f7412014f847f45b8cb75f462ab52049ac8f9b9292ca01df9456a

    • SSDEEP

      3072:zxqZWf7aNQYF8Hx3IeJve/t9FhZPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO2:FqZ2Hx3ZJuFh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks