General

  • Target

    0x0008000000018fb3-76.dat

  • Size

    174KB

  • Sample

    230722-xr5tvabg85

  • MD5

    88902ec73df2239eb1b5444e9faca32e

  • SHA1

    708b48c5f20fb8929510495b969f77cf7f990061

  • SHA256

    d68f96f7972e2a8c02ed03bf9cb5bdba900bb7dde262eeddc9a31cd30722f3bf

  • SHA512

    b88c8e41ffd91482882d22569af4c86302e483ccc0cc0f1931080c126a1794a6e2183880a153107911c28526782faf1fb5f59efa4cf5d32eb1a9ec9125084fe6

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Targets

    • Target

      0x0008000000018fb3-76.dat

    • Size

      174KB

    • MD5

      88902ec73df2239eb1b5444e9faca32e

    • SHA1

      708b48c5f20fb8929510495b969f77cf7f990061

    • SHA256

      d68f96f7972e2a8c02ed03bf9cb5bdba900bb7dde262eeddc9a31cd30722f3bf

    • SHA512

      b88c8e41ffd91482882d22569af4c86302e483ccc0cc0f1931080c126a1794a6e2183880a153107911c28526782faf1fb5f59efa4cf5d32eb1a9ec9125084fe6

    • SSDEEP

      3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks