General

  • Target

    0x000800000001230f-116.dat

  • Size

    145KB

  • Sample

    230523-dt7axadf55

  • MD5

    b224a1fddaca0873d032d5012c1722b7

  • SHA1

    779b7dc10662ff584b8c948b109e602e1c9ff19f

  • SHA256

    469307d1d2362d40adf387416e3196867c6ce648422ec1184fa17bc0910c5f8e

  • SHA512

    bf829381a9360485a1977c3cf6a9f8d160002d3e751b3970b5904a9a823cbb09c458fd3784e25452bee7560ed2cf9257c738e868a271d7c0055eafc2e23114e6

  • SSDEEP

    3072:FV+m5chQmRSZkJaj+5oxvtXwkXh0Za8e8hM:FjE1GnRXh0Q

Malware Config

Extracted

Family

redline

Botnet

deren

C2

77.91.68.253:19065

Attributes
  • auth_value

    04a169f1fb198bfbeca74d0e06ea2d54

Targets

    • Target

      0x000800000001230f-116.dat

    • Size

      145KB

    • MD5

      b224a1fddaca0873d032d5012c1722b7

    • SHA1

      779b7dc10662ff584b8c948b109e602e1c9ff19f

    • SHA256

      469307d1d2362d40adf387416e3196867c6ce648422ec1184fa17bc0910c5f8e

    • SHA512

      bf829381a9360485a1977c3cf6a9f8d160002d3e751b3970b5904a9a823cbb09c458fd3784e25452bee7560ed2cf9257c738e868a271d7c0055eafc2e23114e6

    • SSDEEP

      3072:FV+m5chQmRSZkJaj+5oxvtXwkXh0Za8e8hM:FjE1GnRXh0Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks