General

  • Target

    f493e0f5fa7a16a83488f5cd875b3ef4b4e66ddd7d164efb2321e06a0f95fd59

  • Size

    308KB

  • Sample

    230718-vd6g4scd76

  • MD5

    8f63014677b93efedc1fa92d7735fdaa

  • SHA1

    8cbee5c07f41c71c0ec7859ac75ea688d8582c90

  • SHA256

    f493e0f5fa7a16a83488f5cd875b3ef4b4e66ddd7d164efb2321e06a0f95fd59

  • SHA512

    98f2047465693af8ade79d4b7299bc502a04c4ea3701fb0e2a0a1cd62941916d7d7bfabeef90013f703dbe815919f7553285c5b96777478546fd0f02f3773913

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      f493e0f5fa7a16a83488f5cd875b3ef4b4e66ddd7d164efb2321e06a0f95fd59

    • Size

      308KB

    • MD5

      8f63014677b93efedc1fa92d7735fdaa

    • SHA1

      8cbee5c07f41c71c0ec7859ac75ea688d8582c90

    • SHA256

      f493e0f5fa7a16a83488f5cd875b3ef4b4e66ddd7d164efb2321e06a0f95fd59

    • SHA512

      98f2047465693af8ade79d4b7299bc502a04c4ea3701fb0e2a0a1cd62941916d7d7bfabeef90013f703dbe815919f7553285c5b96777478546fd0f02f3773913

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks