General

  • Target

    9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.zip

  • Size

    254KB

  • Sample

    230308-psrplsgd28

  • MD5

    21c988400b0704bdf68a6df59c96db22

  • SHA1

    9c66722aae79d51c168b453da62632f1e4083b1d

  • SHA256

    55c8e9fccdfa109861cc90ea5b6c8af20c8d3436bb61a18b4796aa0aa50d2467

  • SHA512

    0ee17ad5d6e31f0993e940c470e945fc1f49436f63eb85d262bbe9119c8c1edc1f1222b3f8fd50618bdedfeb07880a468fed6cf5e2490e1a3d5f9ce54de28853

  • SSDEEP

    6144:nM8Ebee9TFVCIflBoBVH9q5CyOFgIkm6SCpCYPk+o7PGCbVmZ:5T8Lj4dq09km6SCsY8+gGCJmZ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fud

C2

193.233.20.27:4123

Attributes
  • auth_value

    cddc991efd6918ad5321d80dac884b40

Targets

    • Target

      9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.exe

    • Size

      365KB

    • MD5

      69fb73e283630210dcb0e9b400a1ee4c

    • SHA1

      f746b5f15ebf476579d0705720ab4daec3306e41

    • SHA256

      9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2

    • SHA512

      ee9062a2b4a2ece85c000e369dd1bc1815ce159c87235cba0e36e7a26f7548c28d4c6dfe9a10b22addbe7b1f8c2cd9972446925a5e57fa0644d9c617cda1784f

    • SSDEEP

      6144:YY0L64nRBgQZ50kxyZCQj4pPIuVBNX++ZbE8GqcdPQrixxAAY4eZu:YY0O4RBgQwsyZj4pPlxu+ZQ8id4rixxH

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks