General

  • Target

    44d3f4d97e06abedd5e4814e65626359d88e1fbe00a621e4689b96ea547b72c0

  • Size

    308KB

  • Sample

    230718-j9danahh4y

  • MD5

    19b27f0014b5d734918d575740ae75c5

  • SHA1

    0f8524094cdec7802d2908f1314cccfd04ab2714

  • SHA256

    44d3f4d97e06abedd5e4814e65626359d88e1fbe00a621e4689b96ea547b72c0

  • SHA512

    276d18908a64af1fed32f2f974776a2e11538116901c07ec56cd79c192be2365a1f23490cccf0b70834406cd2692a655a0c2713bb1b1b9e2ad804a9e3db5dabb

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      44d3f4d97e06abedd5e4814e65626359d88e1fbe00a621e4689b96ea547b72c0

    • Size

      308KB

    • MD5

      19b27f0014b5d734918d575740ae75c5

    • SHA1

      0f8524094cdec7802d2908f1314cccfd04ab2714

    • SHA256

      44d3f4d97e06abedd5e4814e65626359d88e1fbe00a621e4689b96ea547b72c0

    • SHA512

      276d18908a64af1fed32f2f974776a2e11538116901c07ec56cd79c192be2365a1f23490cccf0b70834406cd2692a655a0c2713bb1b1b9e2ad804a9e3db5dabb

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks