General

  • Target

    0x0007000000013990-1062.dat

  • Size

    175KB

  • Sample

    230327-vxlxtaee44

  • MD5

    52969041479679cb9cb21cb5afa3e724

  • SHA1

    b817b690a986937e77e60a235e3224080dda8ef9

  • SHA256

    d42422cdad078d75db4e7da89a8210a8090dd46528427bdd9ae92f7b09671ae9

  • SHA512

    76d39bd3c8d23173fb95e37caef77748fde91c368113e7219f365f9594fe2164a85c639ff51588707f4d6a929aa876c0b7f1a1f1521afa6791804d49a230f987

  • SSDEEP

    3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

Malware Config

Extracted

Family

redline

Botnet

gong

C2

193.233.20.33:4125

Attributes
  • auth_value

    16950897b83de3bba9e4de36f06a8c05

Targets

    • Target

      0x0007000000013990-1062.dat

    • Size

      175KB

    • MD5

      52969041479679cb9cb21cb5afa3e724

    • SHA1

      b817b690a986937e77e60a235e3224080dda8ef9

    • SHA256

      d42422cdad078d75db4e7da89a8210a8090dd46528427bdd9ae92f7b09671ae9

    • SHA512

      76d39bd3c8d23173fb95e37caef77748fde91c368113e7219f365f9594fe2164a85c639ff51588707f4d6a929aa876c0b7f1a1f1521afa6791804d49a230f987

    • SSDEEP

      3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks