General

  • Target

    0x0007000000016d50-129.dat

  • Size

    175KB

  • Sample

    230806-graeyahe3x

  • MD5

    d97ba5fcfb757040c84d2075ad1e70cd

  • SHA1

    eec825b966d71fceabf0c08336c58c4892ceb6cc

  • SHA256

    f7026f13bab2298ba33f70c6084ac60119ceb2c09d5029ee35817904181fd412

  • SHA512

    aad07e2418c0166469be5cf8e01c84d96587e56003158b0465363fe06270a92a14e8752f62444aa333790a6a71c8e775f9b1ca4f1bef6750305f54afe365cc29

  • SSDEEP

    3072:9SZeJjHB9I0U6o4uOpN2AKU0BIE00KmH5kGvJk8e8hU:9SZe79I0U6o4D0IE0I5kGvi

Malware Config

Extracted

Family

redline

Botnet

micky

C2

77.91.124.172:19071

Attributes
  • auth_value

    748f3c67c004f4a994500f05127b4428

Targets

    • Target

      0x0007000000016d50-129.dat

    • Size

      175KB

    • MD5

      d97ba5fcfb757040c84d2075ad1e70cd

    • SHA1

      eec825b966d71fceabf0c08336c58c4892ceb6cc

    • SHA256

      f7026f13bab2298ba33f70c6084ac60119ceb2c09d5029ee35817904181fd412

    • SHA512

      aad07e2418c0166469be5cf8e01c84d96587e56003158b0465363fe06270a92a14e8752f62444aa333790a6a71c8e775f9b1ca4f1bef6750305f54afe365cc29

    • SSDEEP

      3072:9SZeJjHB9I0U6o4uOpN2AKU0BIE00KmH5kGvJk8e8hU:9SZe79I0U6o4D0IE0I5kGvi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks