General

  • Target

    f0845043.exe

  • Size

    145KB

  • Sample

    230530-b3al7aee28

  • MD5

    7afca2ca9835921bf38a27cb798befef

  • SHA1

    5e68110bdbff8fc5eefaa1810d89c7e485bb90a4

  • SHA256

    f0ca17800e5cb039dbaf698e81c0027576fd7482ac459ff6f02b1f3f843a6c2f

  • SHA512

    2f1cd6dcaff93be80b3f66d9ffec3ff5083c9089ccab931f8a5b9cf2e6941ce5d20f7bf720903a7da9a018a431568899783da84499c3f9c8dd660d8fff3c2b5a

  • SSDEEP

    3072:UV+m5crQmRSR38jQ50LiZzq6/hCZx8e8hG:UjCZVLq/hCr

Malware Config

Extracted

Family

redline

Botnet

dura

C2

83.97.73.127:19062

Attributes
  • auth_value

    44b7d6fb9572dea0d64d018139c3d208

Targets

    • Target

      f0845043.exe

    • Size

      145KB

    • MD5

      7afca2ca9835921bf38a27cb798befef

    • SHA1

      5e68110bdbff8fc5eefaa1810d89c7e485bb90a4

    • SHA256

      f0ca17800e5cb039dbaf698e81c0027576fd7482ac459ff6f02b1f3f843a6c2f

    • SHA512

      2f1cd6dcaff93be80b3f66d9ffec3ff5083c9089ccab931f8a5b9cf2e6941ce5d20f7bf720903a7da9a018a431568899783da84499c3f9c8dd660d8fff3c2b5a

    • SSDEEP

      3072:UV+m5crQmRSR38jQ50LiZzq6/hCZx8e8hG:UjCZVLq/hCr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks