General

  • Target

    aa6cefc44c3ebe79abf93c4fcbe624693cac58949b990c474d86899e2332cdbe

  • Size

    308KB

  • Sample

    230716-1s215ahf91

  • MD5

    7a5e08473495c1dfc15f11373cfca649

  • SHA1

    d21661908b7bc002fdb143cd059efe0ad6d941ef

  • SHA256

    aa6cefc44c3ebe79abf93c4fcbe624693cac58949b990c474d86899e2332cdbe

  • SHA512

    e5ea40760fd89e496c92ead60b28b2e53d2e637f96c609c1fef27a759681d0b6116bf5dcff4908cb7df685c42153be2ba3b8875c821d113f05fa886fd65b11bb

  • SSDEEP

    3072:6m2yoSBzzwgjiRrJwelYpKTqrlxOlLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:zPrjiRVwzcprsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      aa6cefc44c3ebe79abf93c4fcbe624693cac58949b990c474d86899e2332cdbe

    • Size

      308KB

    • MD5

      7a5e08473495c1dfc15f11373cfca649

    • SHA1

      d21661908b7bc002fdb143cd059efe0ad6d941ef

    • SHA256

      aa6cefc44c3ebe79abf93c4fcbe624693cac58949b990c474d86899e2332cdbe

    • SHA512

      e5ea40760fd89e496c92ead60b28b2e53d2e637f96c609c1fef27a759681d0b6116bf5dcff4908cb7df685c42153be2ba3b8875c821d113f05fa886fd65b11bb

    • SSDEEP

      3072:6m2yoSBzzwgjiRrJwelYpKTqrlxOlLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:zPrjiRVwzcprsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks