General

  • Target

    0x00080000000122ea-1062.dat

  • Size

    175KB

  • Sample

    230327-vk3pssge2w

  • MD5

    ebbda5513113423edaa258505416fbaf

  • SHA1

    e13b0f35cdb2ed8f6beb5e4fbc638f2c32a353d9

  • SHA256

    612b21e2d9198d8e8bf72e631ed1c7ed5c529dc74d8c61d5129178691504b8d7

  • SHA512

    4139b39875efafe9e1297335f9f07fbe50c054ee77a4fc64bfb3f095c41f1b8d191bdf0cec22c0e6e0eb0a2343e42a62406b88bcfaf4f9ee8edaba16346ac40d

  • SSDEEP

    3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

Malware Config

Extracted

Family

redline

Botnet

gong

C2

193.233.20.33:4125

Attributes
  • auth_value

    16950897b83de3bba9e4de36f06a8c05

Targets

    • Target

      0x00080000000122ea-1062.dat

    • Size

      175KB

    • MD5

      ebbda5513113423edaa258505416fbaf

    • SHA1

      e13b0f35cdb2ed8f6beb5e4fbc638f2c32a353d9

    • SHA256

      612b21e2d9198d8e8bf72e631ed1c7ed5c529dc74d8c61d5129178691504b8d7

    • SHA512

      4139b39875efafe9e1297335f9f07fbe50c054ee77a4fc64bfb3f095c41f1b8d191bdf0cec22c0e6e0eb0a2343e42a62406b88bcfaf4f9ee8edaba16346ac40d

    • SSDEEP

      3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks