General

  • Target

    b8fcce18dae7a74fb9a81cb3f2361f320b67051ec575c110a475c89bf566989e

  • Size

    308KB

  • Sample

    230719-ce1n5sfh2y

  • MD5

    dbb9ba6ec1cfb94ac586222e02f21678

  • SHA1

    4428a3745df192e4e17cd76ac15dea9a21ff8b88

  • SHA256

    b8fcce18dae7a74fb9a81cb3f2361f320b67051ec575c110a475c89bf566989e

  • SHA512

    5fcef3a26b239910eb7aa354b0951fdcbaf73dc5a988fa58e6d1e53144c4868553af7aef8e4a4eb5cefa490597bbfbee106dd184f17960caf1d4ce2ec6ad7417

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      b8fcce18dae7a74fb9a81cb3f2361f320b67051ec575c110a475c89bf566989e

    • Size

      308KB

    • MD5

      dbb9ba6ec1cfb94ac586222e02f21678

    • SHA1

      4428a3745df192e4e17cd76ac15dea9a21ff8b88

    • SHA256

      b8fcce18dae7a74fb9a81cb3f2361f320b67051ec575c110a475c89bf566989e

    • SHA512

      5fcef3a26b239910eb7aa354b0951fdcbaf73dc5a988fa58e6d1e53144c4868553af7aef8e4a4eb5cefa490597bbfbee106dd184f17960caf1d4ce2ec6ad7417

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks