General

  • Target

    0x0007000000013397-1066.dat

  • Size

    175KB

  • Sample

    230327-vrbvnaed97

  • MD5

    efc2bc20da3bcef6c978112da368f78f

  • SHA1

    c192dd5b289f4140a347f68a78ef906391761345

  • SHA256

    5f6af6d082f5b2f977bcb890d7bcd4569f9ea6e5d061bc9f11524ffdcee5700a

  • SHA512

    197b6691e996f1214ea6bc61f374aa93d4c99771947e4708f272d3e254da9ec139f6517c4d1ed1aac954e1bbc1ad1b498d3bd2ad4e34f0c2a9d2adb911da5a92

  • SSDEEP

    3072:7xqZW11a2kX8fSx3IeJwewI9zhfrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOZ:NqZkSx3ZJ5zh

Malware Config

Extracted

Family

redline

Botnet

vila

C2

193.233.20.33:4125

Attributes
  • auth_value

    94b115d79ddcab0a0fb9dfab8e225c3b

Targets

    • Target

      0x0007000000013397-1066.dat

    • Size

      175KB

    • MD5

      efc2bc20da3bcef6c978112da368f78f

    • SHA1

      c192dd5b289f4140a347f68a78ef906391761345

    • SHA256

      5f6af6d082f5b2f977bcb890d7bcd4569f9ea6e5d061bc9f11524ffdcee5700a

    • SHA512

      197b6691e996f1214ea6bc61f374aa93d4c99771947e4708f272d3e254da9ec139f6517c4d1ed1aac954e1bbc1ad1b498d3bd2ad4e34f0c2a9d2adb911da5a92

    • SSDEEP

      3072:7xqZW11a2kX8fSx3IeJwewI9zhfrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOZ:NqZkSx3ZJ5zh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks