General

  • Target

    0x0030000000015c97-94.dat

  • Size

    173KB

  • Sample

    230719-1nxkvabd43

  • MD5

    919b8d25de11bc7088c75b1697973577

  • SHA1

    e2a0ee1f17decf3c863e28f040060bae052792bf

  • SHA256

    910a05ca93c768cb67f1db588380ad0f9fd8b4027b09616a939ea3fc44f4a7f7

  • SHA512

    e48c38709d3f36197f03480b321d312bb54f1df93f5a7feab9a6b134c15fe528a94f6655389c280787c7421f94965b8197be48964f2334e70271bd95c72d1f12

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0030000000015c97-94.dat

    • Size

      173KB

    • MD5

      919b8d25de11bc7088c75b1697973577

    • SHA1

      e2a0ee1f17decf3c863e28f040060bae052792bf

    • SHA256

      910a05ca93c768cb67f1db588380ad0f9fd8b4027b09616a939ea3fc44f4a7f7

    • SHA512

      e48c38709d3f36197f03480b321d312bb54f1df93f5a7feab9a6b134c15fe528a94f6655389c280787c7421f94965b8197be48964f2334e70271bd95c72d1f12

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks