General

  • Target

    Stripe-CC.rar

  • Size

    219KB

  • Sample

    230131-k4h5dshe4z

  • MD5

    722bb216b861eec819ef1a95702644c2

  • SHA1

    826bd3b5598609c8b1c7f37f2f83e91a87311dea

  • SHA256

    df3f3c080f132068e291916cc61b45dd0a3fc806e4bda80d580df238ac067430

  • SHA512

    257378e32edf9ff445c131ee8c09a6f81e21ccf03eae1ed18d7889ff7f519d8d90803560f10ac2c02b2c277f4b0fc5c24b323bdeff1700508d195bdf7708471e

  • SSDEEP

    3072:1dNfbFNOLWAlwTEZ10ot4B1uzGYFWrmdegoTsZX8MRPcVLOwpYogm0cdKdWtRgfq:Ho4TEZ1mKDWr9goTusmP2P0oqgym

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

147.189.171.41:20280

Targets

    • Target

      Stripe-CC/Start.exe

    • Size

      95KB

    • MD5

      b96031526ce0b6d97fe346e96fb5000c

    • SHA1

      d6d4424448016e4ed32d77872e23a69b08e018e6

    • SHA256

      43d133e66ac7bf03deaeb59b38250f0e6c499f0b4da7f1ba1177c7bfcb6a996d

    • SHA512

      9f2e2c9ed6d23b5bac16ab5a20537f0cfd7610af994f433c3aa9139847a588175b6975d26b10469b4d1737c3d77d7d4c102d92685295d14261936ef99021fe73

    • SSDEEP

      1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2E3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdu8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks