General

  • Target

    1969611b1b8f8c083779f4ee86a062307f37e2ae44f67da4404cf1a370acda84

  • Size

    308KB

  • Sample

    230716-vetjyagf9t

  • MD5

    1e9ebc6d671dcffe6ada1783e621e6bd

  • SHA1

    f1061f798bdfe98ab14bc5e654fe4b2830ac4531

  • SHA256

    1969611b1b8f8c083779f4ee86a062307f37e2ae44f67da4404cf1a370acda84

  • SHA512

    79df0c73ca9c3d85e56a9183798559b4b851850956a93da2fb0baa66b58ea4695c96a62bcbab8d3d79099cc3f9a69587ce87136b2d1043d0995bfcc37fa0d393

  • SSDEEP

    3072:cxe66ixzzLwjiR7ZwelYpKj/rlxKf9oLX049hWa/dUBilHMOnwXQPq8Gxzn7298p:i/KjiRVwz8k9orsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      1969611b1b8f8c083779f4ee86a062307f37e2ae44f67da4404cf1a370acda84

    • Size

      308KB

    • MD5

      1e9ebc6d671dcffe6ada1783e621e6bd

    • SHA1

      f1061f798bdfe98ab14bc5e654fe4b2830ac4531

    • SHA256

      1969611b1b8f8c083779f4ee86a062307f37e2ae44f67da4404cf1a370acda84

    • SHA512

      79df0c73ca9c3d85e56a9183798559b4b851850956a93da2fb0baa66b58ea4695c96a62bcbab8d3d79099cc3f9a69587ce87136b2d1043d0995bfcc37fa0d393

    • SSDEEP

      3072:cxe66ixzzLwjiR7ZwelYpKj/rlxKf9oLX049hWa/dUBilHMOnwXQPq8Gxzn7298p:i/KjiRVwz8k9orsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks