General

  • Target

    0x00070000000139eb-116.dat

  • Size

    145KB

  • Sample

    230524-bwzmqsac54

  • MD5

    1f6a91c69356da7cb984b1ac7980fcf7

  • SHA1

    2e7b75d0f7c5b8f72e187b41f468975c5f4f1d34

  • SHA256

    5533a5d46239012388a2f35b5cb2fcd393da8fa3ab9b723f999631c54163f238

  • SHA512

    2a2311ed150807813683a9a63c77633d1cab5f9dc465d0fb365b88bbb27eb25081e5e240d29a3bae3ab5cbf08f6c4e70bec9bb8e516894823bad15955b5b1460

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x00070000000139eb-116.dat

    • Size

      145KB

    • MD5

      1f6a91c69356da7cb984b1ac7980fcf7

    • SHA1

      2e7b75d0f7c5b8f72e187b41f468975c5f4f1d34

    • SHA256

      5533a5d46239012388a2f35b5cb2fcd393da8fa3ab9b723f999631c54163f238

    • SHA512

      2a2311ed150807813683a9a63c77633d1cab5f9dc465d0fb365b88bbb27eb25081e5e240d29a3bae3ab5cbf08f6c4e70bec9bb8e516894823bad15955b5b1460

    • SSDEEP

      3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks