General

  • Target

    0x002e000000014bf1-94.dat

  • Size

    173KB

  • Sample

    230719-1wf8tsbd73

  • MD5

    d2c139b9404055c46938b2284a8d055c

  • SHA1

    97e61929f30d479295f898b31da1d02c2061dbbd

  • SHA256

    7c3b9277d763519314b0057e02e9eab74aa8dda72a97d6d85879ec34a71bdefe

  • SHA512

    32bc5be53b4b149be240077c80d0386f8d4a2386dc8158717ce43fe0bfb30bff1ee2299d705f39337f8e3ec52d514153c961e610b9ddc5e329748c43e28df642

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x002e000000014bf1-94.dat

    • Size

      173KB

    • MD5

      d2c139b9404055c46938b2284a8d055c

    • SHA1

      97e61929f30d479295f898b31da1d02c2061dbbd

    • SHA256

      7c3b9277d763519314b0057e02e9eab74aa8dda72a97d6d85879ec34a71bdefe

    • SHA512

      32bc5be53b4b149be240077c80d0386f8d4a2386dc8158717ce43fe0bfb30bff1ee2299d705f39337f8e3ec52d514153c961e610b9ddc5e329748c43e28df642

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks