General

  • Target

    abe218d09ea20cd6677bb6a7e1aca07b.bin

  • Size

    252KB

  • Sample

    230309-b151baha2t

  • MD5

    6ccb61cb8836cb5af6e280c36b189032

  • SHA1

    d0c864785a83d27045f59938342d1b20683797ae

  • SHA256

    eaa07d46a969d3f43ba58fc7cf860690e696c6694169f773a2784edb27fa2f45

  • SHA512

    cb645ea172a21cbae8cffa48acef5a91af294ae00f53ea01d6a5e2d3361077d6a345614d3fb00dee69d283ad0b15cfd15c57cf84c69ab8ea2e65cae1de27bd62

  • SSDEEP

    6144:aY/IC6hVgQm/awwGrIj+oIbYthFKEnlvjMk9c55RsUhu+:xI7A0w2CoME2P5RsUhu+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fud

C2

193.233.20.27:4123

Attributes
  • auth_value

    cddc991efd6918ad5321d80dac884b40

Targets

    • Target

      9e075cfce69b8fceb8028d1f8647c3f8abde1964fa44a3f65254cc1c2993a7cc.exe

    • Size

      361KB

    • MD5

      abe218d09ea20cd6677bb6a7e1aca07b

    • SHA1

      eb2e23306a9aecc617b4798c4dab58bf37caa438

    • SHA256

      9e075cfce69b8fceb8028d1f8647c3f8abde1964fa44a3f65254cc1c2993a7cc

    • SHA512

      c5ab1bc7f59cb13ec7eac73fdfdd15592a38185949c7e8deb33b72e9c7ce3982741b12c3d6502c1fd0181df5bcf773ac097ab4c5567b5700405dfa3db181bec4

    • SSDEEP

      6144:A8L22mM+YgCpTJvObOKXE8/BJVq2UDRVcivk+RVZyypj4eZ:xS2mM+YgKTJvOy8XVXUdV1vk+RVZpTZ

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks