General

  • Target

    0x0006000000016ba4101_JC.dat

  • Size

    174KB

  • Sample

    230903-lcla4shb82

  • MD5

    928176496be81decc21aa8fa58053699

  • SHA1

    3fe8a690df2290415040aa409194cade84370841

  • SHA256

    8d2ee0cb38c20ccb8c91e1482aabea35ef7a5c3dddf8049ea578b8e7ed1b498b

  • SHA512

    81051283963921a0e0db05ce59408c42196f4fc48b20890c56dcbe0e1758d3fee4bcba962824aedacb0d76b552e0c4c1ffc73eb4078dcffe4f991d04ac398366

  • SSDEEP

    3072:QFUgdzI5dkI0BHjt8sOpVQkeKQqE0yM358JB8e8hv:QFUgdukI0BHjt8SqE0JWX

Malware Config

Extracted

Family

redline

Botnet

narik

C2

77.91.124.82:19071

Attributes
  • auth_value

    07924f5ef90576eb64faea857b8ba3e5

Targets

    • Target

      0x0006000000016ba4101_JC.dat

    • Size

      174KB

    • MD5

      928176496be81decc21aa8fa58053699

    • SHA1

      3fe8a690df2290415040aa409194cade84370841

    • SHA256

      8d2ee0cb38c20ccb8c91e1482aabea35ef7a5c3dddf8049ea578b8e7ed1b498b

    • SHA512

      81051283963921a0e0db05ce59408c42196f4fc48b20890c56dcbe0e1758d3fee4bcba962824aedacb0d76b552e0c4c1ffc73eb4078dcffe4f991d04ac398366

    • SSDEEP

      3072:QFUgdzI5dkI0BHjt8sOpVQkeKQqE0yM358JB8e8hv:QFUgdukI0BHjt8SqE0JWX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks