General

  • Target

    0x0008000000018fc1-92.dat

  • Size

    173KB

  • Sample

    230720-krml2sea89

  • MD5

    20fafd4ab90d48572b7eff3af5290e01

  • SHA1

    be4dd9e24c033148af19f8a8ead5ec8ad3ff274b

  • SHA256

    97ac83744fbd23224285290a505130b7431dc3b79fa43fa4fe6e782be72a2134

  • SHA512

    d265762460e36165c74b2c52ee8c28cdfcbfa88d70a4fd46fbe21d69595d4de6b18a24af3c977810b64a450a1fd72a6c1d3d9e709e2f844d255699321096399b

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0008000000018fc1-92.dat

    • Size

      173KB

    • MD5

      20fafd4ab90d48572b7eff3af5290e01

    • SHA1

      be4dd9e24c033148af19f8a8ead5ec8ad3ff274b

    • SHA256

      97ac83744fbd23224285290a505130b7431dc3b79fa43fa4fe6e782be72a2134

    • SHA512

      d265762460e36165c74b2c52ee8c28cdfcbfa88d70a4fd46fbe21d69595d4de6b18a24af3c977810b64a450a1fd72a6c1d3d9e709e2f844d255699321096399b

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks