General

  • Target

    0x00080000000131d4-78.dat

  • Size

    145KB

  • Sample

    230524-v9qrjaeb8x

  • MD5

    7bc5b9a7058acf7bb191dba798784c8e

  • SHA1

    70d1ff7d34ff0446128d9f08c1787ebefe7ed0b0

  • SHA256

    23a9f62a8d8a1ff1b4ad1d680bee8d7a08bf7b562e6ce19cac3fb56e87b5a824

  • SHA512

    f7db1c171c2881de4f46776b3fcb7dd584e630b621d5708552a36791e47de4973e4046941f062758758be153a953bb1a457823f7bb3a342c82bdcd864512ecc8

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x00080000000131d4-78.dat

    • Size

      145KB

    • MD5

      7bc5b9a7058acf7bb191dba798784c8e

    • SHA1

      70d1ff7d34ff0446128d9f08c1787ebefe7ed0b0

    • SHA256

      23a9f62a8d8a1ff1b4ad1d680bee8d7a08bf7b562e6ce19cac3fb56e87b5a824

    • SHA512

      f7db1c171c2881de4f46776b3fcb7dd584e630b621d5708552a36791e47de4973e4046941f062758758be153a953bb1a457823f7bb3a342c82bdcd864512ecc8

    • SSDEEP

      3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks