General

  • Target

    0c3d5208b3e067f4f580c9cd7519af91979dd2a7dbe69bcf2c85aee879ff60ee

  • Size

    308KB

  • Sample

    230717-vsq1zaee41

  • MD5

    a871087f856398f7df68cf4bd087c264

  • SHA1

    fac3f256d3f2f6c07fc1a6fee8963822e1a8e89a

  • SHA256

    0c3d5208b3e067f4f580c9cd7519af91979dd2a7dbe69bcf2c85aee879ff60ee

  • SHA512

    f540f357fea4e937a941d3c06f8b4eec6ef3ea803faeb36bc7f3c28fe0c767b17865843c70e89b2858dde1adc47f4305b6e8c6f1234cd8da601ef4fda42282f4

  • SSDEEP

    3072:PuZnreHxzzc4jiR7KwelYp+tnrlsi0LX049hWa/dUBilHMOnwXQPq8Gxzn72989r:m4fjiROwz48rsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      0c3d5208b3e067f4f580c9cd7519af91979dd2a7dbe69bcf2c85aee879ff60ee

    • Size

      308KB

    • MD5

      a871087f856398f7df68cf4bd087c264

    • SHA1

      fac3f256d3f2f6c07fc1a6fee8963822e1a8e89a

    • SHA256

      0c3d5208b3e067f4f580c9cd7519af91979dd2a7dbe69bcf2c85aee879ff60ee

    • SHA512

      f540f357fea4e937a941d3c06f8b4eec6ef3ea803faeb36bc7f3c28fe0c767b17865843c70e89b2858dde1adc47f4305b6e8c6f1234cd8da601ef4fda42282f4

    • SSDEEP

      3072:PuZnreHxzzc4jiR7KwelYp+tnrlsi0LX049hWa/dUBilHMOnwXQPq8Gxzn72989r:m4fjiROwz48rsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks