General

  • Target

    0x000600000001b07942_JC.dat

  • Size

    176KB

  • Sample

    230902-mkk6rabh5v

  • MD5

    dd8f8d8b00d511f9d974c8a96fb7a3f4

  • SHA1

    113279d276333db9d0a4bcdbb1ed9d6d1163ba76

  • SHA256

    8dbaff076ec668257254be2c2b131f37d4b6f1f75c86833b6df7555b4571bb2f

  • SHA512

    0059d5fc7d8e894222b1a8159f34f30b31eb8c40f4b68f58adf254917d0aa2b62fc4873f5c27c0bf419260f174f6ea6f7a87ae8fdedb3dc6bb0627d00c91b206

  • SSDEEP

    3072:1hg4vliHjI05aBkbOVCFlAsNN4E0sW+1QlQneUJE8e8hA:1C44jI05aBkF4E0KQlQneUC

Malware Config

Extracted

Family

redline

Botnet

sruta

C2

77.91.124.82:19071

Attributes
  • auth_value

    c556edcd49703319eca74247de20c236

Targets

    • Target

      0x000600000001b07942_JC.dat

    • Size

      176KB

    • MD5

      dd8f8d8b00d511f9d974c8a96fb7a3f4

    • SHA1

      113279d276333db9d0a4bcdbb1ed9d6d1163ba76

    • SHA256

      8dbaff076ec668257254be2c2b131f37d4b6f1f75c86833b6df7555b4571bb2f

    • SHA512

      0059d5fc7d8e894222b1a8159f34f30b31eb8c40f4b68f58adf254917d0aa2b62fc4873f5c27c0bf419260f174f6ea6f7a87ae8fdedb3dc6bb0627d00c91b206

    • SSDEEP

      3072:1hg4vliHjI05aBkbOVCFlAsNN4E0sW+1QlQneUJE8e8hA:1C44jI05aBkF4E0KQlQneUC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks