General

  • Target

    0x0008000000017569-92.dat

  • Size

    173KB

  • Sample

    230722-ey8vzahf35

  • MD5

    e8d59730b654b6dffb82785ae810436e

  • SHA1

    b6f442d01bb1aebdc4020271ae78bcaf539adcb6

  • SHA256

    57cec7c5aa841b5f36969108c5c8bd2abcb5af457ddf5d5bcc635857193d1a02

  • SHA512

    bcbb7806dcbf4b702411ef09b3ffdb13efe56ff23c55ff48ecfdb8d4b4475a4dde1e7d77d7856fa8ff4e24c398904f41053376c52a52b81a5200876e162485bf

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0008000000017569-92.dat

    • Size

      173KB

    • MD5

      e8d59730b654b6dffb82785ae810436e

    • SHA1

      b6f442d01bb1aebdc4020271ae78bcaf539adcb6

    • SHA256

      57cec7c5aa841b5f36969108c5c8bd2abcb5af457ddf5d5bcc635857193d1a02

    • SHA512

      bcbb7806dcbf4b702411ef09b3ffdb13efe56ff23c55ff48ecfdb8d4b4475a4dde1e7d77d7856fa8ff4e24c398904f41053376c52a52b81a5200876e162485bf

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks