General

  • Target

    b8162d5497ceba6408edb2ee1f8bccffb0d9bd98d361bad52709a69c22f3e575

  • Size

    729KB

  • Sample

    230714-h53t3sdd8y

  • MD5

    e2715193738161bc371382f0c9b4ba58

  • SHA1

    af23005d6823e9f520c6148f2d9023066312e3ab

  • SHA256

    b8162d5497ceba6408edb2ee1f8bccffb0d9bd98d361bad52709a69c22f3e575

  • SHA512

    6609a0e3cd7eb117f3bb27a3c15b1ac9d37d85897d787d8746e16636d4170842493917a04d1ffb5cebaa54f40efcc0d7e7af78eadd453c187acccb71e6277c63

  • SSDEEP

    12288:O5t8FK3x8D8kh1IQK/RxowECWvPNoGAwdfGZ+5iICSVtg0wBW3iFt4ONq30/4Stq:O7PB8D8khe//RxowECWvPNoGAwdfGZYC

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      b8162d5497ceba6408edb2ee1f8bccffb0d9bd98d361bad52709a69c22f3e575

    • Size

      729KB

    • MD5

      e2715193738161bc371382f0c9b4ba58

    • SHA1

      af23005d6823e9f520c6148f2d9023066312e3ab

    • SHA256

      b8162d5497ceba6408edb2ee1f8bccffb0d9bd98d361bad52709a69c22f3e575

    • SHA512

      6609a0e3cd7eb117f3bb27a3c15b1ac9d37d85897d787d8746e16636d4170842493917a04d1ffb5cebaa54f40efcc0d7e7af78eadd453c187acccb71e6277c63

    • SSDEEP

      12288:O5t8FK3x8D8kh1IQK/RxowECWvPNoGAwdfGZ+5iICSVtg0wBW3iFt4ONq30/4Stq:O7PB8D8khe//RxowECWvPNoGAwdfGZYC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks