General

  • Target

    0x000600000001662c67_JC.dat

  • Size

    174KB

  • Sample

    230901-sqn3gsfd2v

  • MD5

    358ce97852b840e3c648452abc8516b5

  • SHA1

    cd1a0a65f0326e5d477bcf48c3d2d186158dcf47

  • SHA256

    9cb36477d6f44c359f21e4f4032cbb5c9e934260f7cfca164427bb34417ce0c1

  • SHA512

    2c999ba816f8772cc267952e2f79d13a3075d05a2ee77f3615e04363cd178bc0204d1ea2fa07fca8a57ecafc537a0a944a9d1cb4421f8d9f0428f791467038bf

  • SSDEEP

    3072:WFQKcZz8I0G8rlinnOgoLC+Vd2hE0MA9iL2GJg8e8hG:qQp8I0G8Ji68hE0IL2GG

Malware Config

Extracted

Family

redline

Botnet

jang

C2

77.91.124.82:19071

Attributes
  • auth_value

    662102010afcbe9e22b13116b1c1a088

Targets

    • Target

      0x000600000001662c67_JC.dat

    • Size

      174KB

    • MD5

      358ce97852b840e3c648452abc8516b5

    • SHA1

      cd1a0a65f0326e5d477bcf48c3d2d186158dcf47

    • SHA256

      9cb36477d6f44c359f21e4f4032cbb5c9e934260f7cfca164427bb34417ce0c1

    • SHA512

      2c999ba816f8772cc267952e2f79d13a3075d05a2ee77f3615e04363cd178bc0204d1ea2fa07fca8a57ecafc537a0a944a9d1cb4421f8d9f0428f791467038bf

    • SSDEEP

      3072:WFQKcZz8I0G8rlinnOgoLC+Vd2hE0MA9iL2GJg8e8hG:qQp8I0G8Ji68hE0IL2GG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks