General

  • Target

    0x00070000000231d6-179.dat

  • Size

    173KB

  • Sample

    230818-y81f5adf38

  • MD5

    0545b1c7d5723f7a10fb687a134ff064

  • SHA1

    28b5f339e46593fdc4ff84295e3de91837d2a4d2

  • SHA256

    3f55703442d32d2df8b449cd5ef29af055c0595170ee3dcc5edf01bca3ad1899

  • SHA512

    c6a82786d8ff71da5e17bdc6ed6aca1a186d0b6ddc567f65b4073d1931fe530ef14a689b2d955ccd0afa796ebe72f4fa0a69c0adbc73df33a6bea82f50b064bc

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      0x00070000000231d6-179.dat

    • Size

      173KB

    • MD5

      0545b1c7d5723f7a10fb687a134ff064

    • SHA1

      28b5f339e46593fdc4ff84295e3de91837d2a4d2

    • SHA256

      3f55703442d32d2df8b449cd5ef29af055c0595170ee3dcc5edf01bca3ad1899

    • SHA512

      c6a82786d8ff71da5e17bdc6ed6aca1a186d0b6ddc567f65b4073d1931fe530ef14a689b2d955ccd0afa796ebe72f4fa0a69c0adbc73df33a6bea82f50b064bc

    • SSDEEP

      3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks