General

  • Target

    0x00080000000122f0-1062.dat

  • Size

    175KB

  • Sample

    230327-v6v7vage8x

  • MD5

    54f4be01fbf32ac0ab8be1578830ea47

  • SHA1

    0cc99e4c83aa7b134f9df15d15e68ba537acc58c

  • SHA256

    05a2be7f07ccd90a58e585605edd88139ce81ed7af47dacb01e949d67aad42b5

  • SHA512

    6fe0e77fd422906933142f00e3ac0d07d599c22c047d58638bdc62c4cb48f20ce7f43403b609d38f63c39c17a9042dc07ac6a2aa673771e4b6f140690eb9dddb

  • SSDEEP

    3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

Malware Config

Extracted

Family

redline

Botnet

gong

C2

193.233.20.33:4125

Attributes
  • auth_value

    16950897b83de3bba9e4de36f06a8c05

Targets

    • Target

      0x00080000000122f0-1062.dat

    • Size

      175KB

    • MD5

      54f4be01fbf32ac0ab8be1578830ea47

    • SHA1

      0cc99e4c83aa7b134f9df15d15e68ba537acc58c

    • SHA256

      05a2be7f07ccd90a58e585605edd88139ce81ed7af47dacb01e949d67aad42b5

    • SHA512

      6fe0e77fd422906933142f00e3ac0d07d599c22c047d58638bdc62c4cb48f20ce7f43403b609d38f63c39c17a9042dc07ac6a2aa673771e4b6f140690eb9dddb

    • SSDEEP

      3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks