General

  • Target

    0x000c000000018bb0-92.dat

  • Size

    173KB

  • Sample

    230722-hzsrxshh62

  • MD5

    62e43e035fc9eb3acd393c11a063cb49

  • SHA1

    31cce08dc5baaa27a449ae8c0f9c39f4eee1fb75

  • SHA256

    550071936cc2c5b950d8fe50351ed846908c0e3ba2c31709507ac7d4acdcf0e9

  • SHA512

    8133a81d46c4b278e3fed3e2788ff088c8fcd01a941f1f73b3feef9f53c7cf3bcc3270ee6f566b55d1bb0e3b0196d6cc267a18c30be76e00b3a818c9fc36398b

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x000c000000018bb0-92.dat

    • Size

      173KB

    • MD5

      62e43e035fc9eb3acd393c11a063cb49

    • SHA1

      31cce08dc5baaa27a449ae8c0f9c39f4eee1fb75

    • SHA256

      550071936cc2c5b950d8fe50351ed846908c0e3ba2c31709507ac7d4acdcf0e9

    • SHA512

      8133a81d46c4b278e3fed3e2788ff088c8fcd01a941f1f73b3feef9f53c7cf3bcc3270ee6f566b55d1bb0e3b0196d6cc267a18c30be76e00b3a818c9fc36398b

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks