General

  • Target

    53a090f5b33341e5b29a68eb9e559cbc31c4949cb26174d8b67c61f997af1030

  • Size

    308KB

  • Sample

    230718-s714dabg87

  • MD5

    0b0e94ac5b03623e9f1da66019612dfe

  • SHA1

    d530a6006e1254ad94103d63d256832a40eed268

  • SHA256

    53a090f5b33341e5b29a68eb9e559cbc31c4949cb26174d8b67c61f997af1030

  • SHA512

    11f6f6ee5d8ec2795d199803171e1ce46dd1c22df6b905c3027840df0697ec246974880231e8ddd221eed98a2d970384b3d15dcc6519ff870f060ffae3db42e6

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      53a090f5b33341e5b29a68eb9e559cbc31c4949cb26174d8b67c61f997af1030

    • Size

      308KB

    • MD5

      0b0e94ac5b03623e9f1da66019612dfe

    • SHA1

      d530a6006e1254ad94103d63d256832a40eed268

    • SHA256

      53a090f5b33341e5b29a68eb9e559cbc31c4949cb26174d8b67c61f997af1030

    • SHA512

      11f6f6ee5d8ec2795d199803171e1ce46dd1c22df6b905c3027840df0697ec246974880231e8ddd221eed98a2d970384b3d15dcc6519ff870f060ffae3db42e6

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks