General

  • Target

    0x0032000000016256-118.dat

  • Size

    172KB

  • Sample

    230719-xzzmssbc8w

  • MD5

    f9134fe199fe40d3840de7c2d1cf7626

  • SHA1

    71e84180ecc47673bba3756dc82831c8ca7703d8

  • SHA256

    c185cbb3f086aa9438a168501878f157ee09772c206e1f696c156287ace76601

  • SHA512

    c206352ac9174758c4ff6dbbd87db05ea2221b3f7fe10812f44ab82f04ff83f71003d1bd0c984bf42851411b67112d49a8500dc56fb0d156152b1f810b9eaef6

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0032000000016256-118.dat

    • Size

      172KB

    • MD5

      f9134fe199fe40d3840de7c2d1cf7626

    • SHA1

      71e84180ecc47673bba3756dc82831c8ca7703d8

    • SHA256

      c185cbb3f086aa9438a168501878f157ee09772c206e1f696c156287ace76601

    • SHA512

      c206352ac9174758c4ff6dbbd87db05ea2221b3f7fe10812f44ab82f04ff83f71003d1bd0c984bf42851411b67112d49a8500dc56fb0d156152b1f810b9eaef6

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks