General

  • Target

    0x0007000000016cc9-101.dat

  • Size

    173KB

  • Sample

    230801-fk7w7aee9x

  • MD5

    f416805f42d8d4b674278bb0cd63e675

  • SHA1

    0a85b67cc20b8f309265698e4c2d57a30c7fac05

  • SHA256

    3908d7fb50fc76a7c6d85190b8f30a555682b63fbfc46b94659c3120b39e3305

  • SHA512

    68c028288a59adeebfc004de9918a444e3ad667986eefb31fca2d40db6bdb2890bd930fe7b9314b1d10c7eba77ca245e2b8b68116376707e19789d4b3e1eb7b8

  • SSDEEP

    3072:Sdro6VLX9Y62FxNz6ryCt4Ec2DfQ8e8hW:Sd79f2dWytEc2DfQ

Malware Config

Extracted

Family

redline

Botnet

papik

C2

77.91.124.156:19071

Attributes
  • auth_value

    325a615d8be5db8e2f7a4c2448fdac3a

Targets

    • Target

      0x0007000000016cc9-101.dat

    • Size

      173KB

    • MD5

      f416805f42d8d4b674278bb0cd63e675

    • SHA1

      0a85b67cc20b8f309265698e4c2d57a30c7fac05

    • SHA256

      3908d7fb50fc76a7c6d85190b8f30a555682b63fbfc46b94659c3120b39e3305

    • SHA512

      68c028288a59adeebfc004de9918a444e3ad667986eefb31fca2d40db6bdb2890bd930fe7b9314b1d10c7eba77ca245e2b8b68116376707e19789d4b3e1eb7b8

    • SSDEEP

      3072:Sdro6VLX9Y62FxNz6ryCt4Ec2DfQ8e8hW:Sd79f2dWytEc2DfQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks