General

  • Target

    l8465738.exe

  • Size

    691KB

  • Sample

    230711-a568haea22

  • MD5

    df4407eb1d1e6cdbe6072f6a6b5e00eb

  • SHA1

    1c3ef1e4fb54b2be7a7c3ee8281a7b0059a04410

  • SHA256

    9e7ed659ef37a747a9adcbe020b382ab679f24f845504cd054c766d388703d80

  • SHA512

    a75a8a80250016344c48241cb44132c822b24bf91ddbbffc111990c6a1537dd245ba0ed7ce336476e93503a52b4f7159701ad05be203b9c4069fd9434e5394ca

  • SSDEEP

    12288:Jw3zk2EgiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:JwDkNgBbVTb34k30/8dRi9

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      l8465738.exe

    • Size

      691KB

    • MD5

      df4407eb1d1e6cdbe6072f6a6b5e00eb

    • SHA1

      1c3ef1e4fb54b2be7a7c3ee8281a7b0059a04410

    • SHA256

      9e7ed659ef37a747a9adcbe020b382ab679f24f845504cd054c766d388703d80

    • SHA512

      a75a8a80250016344c48241cb44132c822b24bf91ddbbffc111990c6a1537dd245ba0ed7ce336476e93503a52b4f7159701ad05be203b9c4069fd9434e5394ca

    • SSDEEP

      12288:Jw3zk2EgiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:JwDkNgBbVTb34k30/8dRi9

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks