General

  • Target

    0x000700000002326e-178.dat

  • Size

    173KB

  • Sample

    230818-tkglwsdc3w

  • MD5

    2a884f33ad53dd2ad8e011deb2c30386

  • SHA1

    2c2d8e660521a0a1e93166995958752b02a61b6e

  • SHA256

    7004a4cd440180e3f90892e296ab76e9a0aebebcc1fd4e49c954dfe8c5caae28

  • SHA512

    d6fe387dc5cfacb6993a4fbd39a5fe045e439561a661cfef4d1f9fc8c40e53484b1ca8762bfc003a72b0cae6f70fc82737bb799964436028860dc974e49bdf46

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      0x000700000002326e-178.dat

    • Size

      173KB

    • MD5

      2a884f33ad53dd2ad8e011deb2c30386

    • SHA1

      2c2d8e660521a0a1e93166995958752b02a61b6e

    • SHA256

      7004a4cd440180e3f90892e296ab76e9a0aebebcc1fd4e49c954dfe8c5caae28

    • SHA512

      d6fe387dc5cfacb6993a4fbd39a5fe045e439561a661cfef4d1f9fc8c40e53484b1ca8762bfc003a72b0cae6f70fc82737bb799964436028860dc974e49bdf46

    • SSDEEP

      3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks