General

  • Target

    0x000800000001231c-109.dat

  • Size

    172KB

  • Sample

    230607-q43fxsbg5s

  • MD5

    3559584530a52bc9d25b1cd761d8fdbb

  • SHA1

    bf5a3e913a3c6f2e886ca54ee54d88fe4d81d310

  • SHA256

    1b4286a80247621d935dbf2f66b0e8f2ac46aa35384dae62441005799e4a004b

  • SHA512

    fed4c8e6a5e8dc31feb4e0d47c8dafd14d2bb7d660c172bf00c09d530ac77c5e5b409572f2d7ab9060032a936fb6834be91ca7879cf42316b70f7473f1eb1852

  • SSDEEP

    1536:gtaPgzl736sv0W7Tp8JFrH4ySLn1nbAxNTIYQ/dbumgzeFra6l0GkR88e8hZ:g6gJBO0y6RbAxNjgOqFra6l/8e8hZ

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.129:19068

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x000800000001231c-109.dat

    • Size

      172KB

    • MD5

      3559584530a52bc9d25b1cd761d8fdbb

    • SHA1

      bf5a3e913a3c6f2e886ca54ee54d88fe4d81d310

    • SHA256

      1b4286a80247621d935dbf2f66b0e8f2ac46aa35384dae62441005799e4a004b

    • SHA512

      fed4c8e6a5e8dc31feb4e0d47c8dafd14d2bb7d660c172bf00c09d530ac77c5e5b409572f2d7ab9060032a936fb6834be91ca7879cf42316b70f7473f1eb1852

    • SSDEEP

      1536:gtaPgzl736sv0W7Tp8JFrH4ySLn1nbAxNTIYQ/dbumgzeFra6l0GkR88e8hZ:g6gJBO0y6RbAxNjgOqFra6l/8e8hZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks