General

  • Target

    SecuriteInfo.com.Variant.Mikey.145425.22281.4686.exe

  • Size

    301KB

  • Sample

    230308-qthzjaea65

  • MD5

    c780b3167a20b5a301cf38a47632e8ad

  • SHA1

    d40f9a142823ff045ef1744f295eea28ad5ea45d

  • SHA256

    4bfeeb31bc6bf577688eab439cd5e32d21bf6e78550f621acc9d1f6820d8c067

  • SHA512

    eec57c4cf26a638f9d235d101498d687022e71939a53edac0c11270b80f1e378ddacd084c2eba9a43705cfb6aeb7d4d4a4af369978f19de40667690f3cb95377

  • SSDEEP

    3072:aQ3XmDX/mIMhZYn4jMEi+Ts1HBIexK+K0sc7I/xTTvyUYGyraHH2DmcnnIHiJlqP:teXuIMhqB6mmdzxdYaH2Dm2nIUGjyn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fud

C2

193.233.20.27:4123

Attributes
  • auth_value

    cddc991efd6918ad5321d80dac884b40

Targets

    • Target

      SecuriteInfo.com.Variant.Mikey.145425.22281.4686.exe

    • Size

      301KB

    • MD5

      c780b3167a20b5a301cf38a47632e8ad

    • SHA1

      d40f9a142823ff045ef1744f295eea28ad5ea45d

    • SHA256

      4bfeeb31bc6bf577688eab439cd5e32d21bf6e78550f621acc9d1f6820d8c067

    • SHA512

      eec57c4cf26a638f9d235d101498d687022e71939a53edac0c11270b80f1e378ddacd084c2eba9a43705cfb6aeb7d4d4a4af369978f19de40667690f3cb95377

    • SSDEEP

      3072:aQ3XmDX/mIMhZYn4jMEi+Ts1HBIexK+K0sc7I/xTTvyUYGyraHH2DmcnnIHiJlqP:teXuIMhqB6mmdzxdYaH2Dm2nIUGjyn

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks