General

  • Target

    92b52f12b97effc0e6b0106e98b1f44c2beccbbd9d8b9a6d2b420e568e19841d

  • Size

    308KB

  • Sample

    230716-tyflrage3s

  • MD5

    b0736f29e9eafc3a2513b2d6710d9a33

  • SHA1

    36916698f3e274a60128debc53ff77787c842194

  • SHA256

    92b52f12b97effc0e6b0106e98b1f44c2beccbbd9d8b9a6d2b420e568e19841d

  • SHA512

    69bcc636b5f586b6286ac2b6cc86bfad4fb3b29ea92f9ca2c2c45977129a156e203fb4c8f52a8d733bb1716f9a6358dd9cb098785c15a1ea365e05b2ae08b252

  • SSDEEP

    3072:o0xra5mBRzzLQjiRb5welYplLSrlxYlLX049hWa/dUBilHMOnwXQPq8Gxzn7298p:VWqKjiRVwzrPrsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      92b52f12b97effc0e6b0106e98b1f44c2beccbbd9d8b9a6d2b420e568e19841d

    • Size

      308KB

    • MD5

      b0736f29e9eafc3a2513b2d6710d9a33

    • SHA1

      36916698f3e274a60128debc53ff77787c842194

    • SHA256

      92b52f12b97effc0e6b0106e98b1f44c2beccbbd9d8b9a6d2b420e568e19841d

    • SHA512

      69bcc636b5f586b6286ac2b6cc86bfad4fb3b29ea92f9ca2c2c45977129a156e203fb4c8f52a8d733bb1716f9a6358dd9cb098785c15a1ea365e05b2ae08b252

    • SSDEEP

      3072:o0xra5mBRzzLQjiRb5welYplLSrlxYlLX049hWa/dUBilHMOnwXQPq8Gxzn7298p:VWqKjiRVwzrPrsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks