General

  • Target

    0x001d000000015045-94.dat

  • Size

    173KB

  • Sample

    230720-la2v3sfb36

  • MD5

    73f9b9cb1c5c1013fcae79d8e6fc697a

  • SHA1

    900a6af5d55720d4a4a1c5cda7c2d3129242c028

  • SHA256

    f1842618448d25984e9f608ecda66b8e767064c259b1a9888f0f7af407c1505f

  • SHA512

    f189b42ded63dc8e47c5554ec285047f94803810d0f647b8438323ef5ca9e682634415dfd5f53594f7ba6e06c22290d3a0e27a5f38089a306ab9ac124014ba5c

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x001d000000015045-94.dat

    • Size

      173KB

    • MD5

      73f9b9cb1c5c1013fcae79d8e6fc697a

    • SHA1

      900a6af5d55720d4a4a1c5cda7c2d3129242c028

    • SHA256

      f1842618448d25984e9f608ecda66b8e767064c259b1a9888f0f7af407c1505f

    • SHA512

      f189b42ded63dc8e47c5554ec285047f94803810d0f647b8438323ef5ca9e682634415dfd5f53594f7ba6e06c22290d3a0e27a5f38089a306ab9ac124014ba5c

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks