General

  • Target

    d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc.zip

  • Size

    47KB

  • Sample

    230508-sjxq2sbc46

  • MD5

    3cbd41d7bb80e22bb9e6716056c534d7

  • SHA1

    62dc5152e41966bfb900373266709195fa6e0ed7

  • SHA256

    486a650f41f555ff7b00d2adc0bed6896433304f85db4d889abf3d2fc22e6d55

  • SHA512

    b81717def1b6e072af57034a33ad20816a423a2f482408a0c02d4020ad2240400e626a82c065c9768fbb4d6caeaa297fb6f9c2bf0a2e0fdabc66a6ae5c1808ab

  • SSDEEP

    768:V2xONzjS112gjtr3ZUIl/OEtP6lltkgQj0iX0sWRaz8hG66GKifBZTqHMhix4SuV:Ho1Ptr3Z3/OEtP6100ikmz8RXKwBZm1g

Score
10/10

Malware Config

Extracted

Family

redline

C2

49.12.47.66:27973

Attributes
  • auth_value

    8bf66f13191598c73cd8cd8e010871b2

Targets

    • Target

      d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc

    • Size

      106KB

    • MD5

      b7e28e908205d80b3afcf1cfa18ee768

    • SHA1

      da826631e490726dae784f592da43176d60b4bc3

    • SHA256

      d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc

    • SHA512

      acc9f19100280f0173d8eed04dcd5970c48bdf684b6d11e88196f80e5975334d010ad63597c1c289ba054430abfd02975fe95cca78a735fe69fe46702f2736b5

    • SSDEEP

      1536:gRxckCrfQ2IxAHcGhZPHPt98xrdUXcl2IFWyPfcHLBGcGwKbuZuwrslQ0wuei6C3:KCrfQAVbWdpfcHA/qwlQhY3

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks