General

  • Target

    2b12867b4bdec491aa8571953414d810.exe

  • Size

    266KB

  • Sample

    230710-mpdmgaag2x

  • MD5

    2b12867b4bdec491aa8571953414d810

  • SHA1

    1f8694bc431fd5097100a66d93cc5e70fbb68947

  • SHA256

    bab02fd6d3dbfc283b4f66cd461729bfe8e7bc1c284b3313f408012c2a47e075

  • SHA512

    8d310f333b70165ecd254ecb9215f9583273474332ef7b441de7b42e23eef6bdf6952f9b81e73a925da49069e43aeb4f0a7329409b7c030d252eb950caea33e0

  • SSDEEP

    3072:bSiu8+iOHMwew7+picM/tsVVct+Z7bYH9jqyo/QnfzKX+9MByRtq9Lxfx:bu8vOswD70VVctqoDo/QnfzKv2tq9L

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      2b12867b4bdec491aa8571953414d810.exe

    • Size

      266KB

    • MD5

      2b12867b4bdec491aa8571953414d810

    • SHA1

      1f8694bc431fd5097100a66d93cc5e70fbb68947

    • SHA256

      bab02fd6d3dbfc283b4f66cd461729bfe8e7bc1c284b3313f408012c2a47e075

    • SHA512

      8d310f333b70165ecd254ecb9215f9583273474332ef7b441de7b42e23eef6bdf6952f9b81e73a925da49069e43aeb4f0a7329409b7c030d252eb950caea33e0

    • SSDEEP

      3072:bSiu8+iOHMwew7+picM/tsVVct+Z7bYH9jqyo/QnfzKX+9MByRtq9Lxfx:bu8vOswD70VVctqoDo/QnfzKv2tq9L

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks