General

  • Target

    bee81b8578b976c7fa31aa8cc4ef76e28f1c7332533f948b9dece43bf5ef2858

  • Size

    405KB

  • Sample

    230103-gbfxsaac33

  • MD5

    c699d1b9931b8a49f49bdf8071be6d2e

  • SHA1

    a35d3723609e0b185ba5826263bac3c48680bb91

  • SHA256

    bee81b8578b976c7fa31aa8cc4ef76e28f1c7332533f948b9dece43bf5ef2858

  • SHA512

    74d3030f7b94a802e21cef3fcbd686069ac2863db99922f6ebdabe932a64a232f86f831d33422bb18a5d366217b24f1cf4bf63a46ad85c90210b39c6e248fddc

  • SSDEEP

    6144:Zqc/toFFC7yFFQA8v6owWgBwFos/925goDqmRtuA/RN:Zq0YF7zQAR/J2k+Qqiu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

suk

C2

193.106.191.25:47242

Attributes
  • auth_value

    9762d5bcad64c7855837e80c232c7e77

Targets

    • Target

      bee81b8578b976c7fa31aa8cc4ef76e28f1c7332533f948b9dece43bf5ef2858

    • Size

      405KB

    • MD5

      c699d1b9931b8a49f49bdf8071be6d2e

    • SHA1

      a35d3723609e0b185ba5826263bac3c48680bb91

    • SHA256

      bee81b8578b976c7fa31aa8cc4ef76e28f1c7332533f948b9dece43bf5ef2858

    • SHA512

      74d3030f7b94a802e21cef3fcbd686069ac2863db99922f6ebdabe932a64a232f86f831d33422bb18a5d366217b24f1cf4bf63a46ad85c90210b39c6e248fddc

    • SSDEEP

      6144:Zqc/toFFC7yFFQA8v6owWgBwFos/925goDqmRtuA/RN:Zq0YF7zQAR/J2k+Qqiu

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks