General

  • Target

    0x00060000000130e0-109.dat

  • Size

    172KB

  • Sample

    230606-f4kk1acb63

  • MD5

    3621043f69278dfc6740a9a00086aea3

  • SHA1

    599f1c7de87ea556d097546a22ac9c6ad3bf0a40

  • SHA256

    4c19b912ad4c06df15972b43379c77c0b7dc21cd987a5ed2cb24a65dbcd032db

  • SHA512

    83d1d5027665909759ea2f006cb0f0dea58ea2491db88191a0000f3f9a4289449716450edd3156357aa008a4639915ad438f09d9289cdeb2010f302907eec900

  • SSDEEP

    3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.126:19048

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Targets

    • Target

      0x00060000000130e0-109.dat

    • Size

      172KB

    • MD5

      3621043f69278dfc6740a9a00086aea3

    • SHA1

      599f1c7de87ea556d097546a22ac9c6ad3bf0a40

    • SHA256

      4c19b912ad4c06df15972b43379c77c0b7dc21cd987a5ed2cb24a65dbcd032db

    • SHA512

      83d1d5027665909759ea2f006cb0f0dea58ea2491db88191a0000f3f9a4289449716450edd3156357aa008a4639915ad438f09d9289cdeb2010f302907eec900

    • SSDEEP

      3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks