General

  • Target

    0x000600000002322877_JC.dat

  • Size

    175KB

  • Sample

    230905-skm81agc5y

  • MD5

    2341409e476079b9dd42737bcd0b12e2

  • SHA1

    194a90c3e6c6668719e3d9a61b6b779fea9a645f

  • SHA256

    8b72e3dc9f6f9f4c5ba215c785daa0120e4eb7104acfe58279c8df83c3403dcb

  • SHA512

    31aeedf733aa876f6cf2d019d9c69d8a34bbf30f9fc6970468600ab48bedc0dc1a42bfbb2e541b1bee88a14f0091795a233d83d50ed07d6ffdfd87ece710da8d

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      0x000600000002322877_JC.dat

    • Size

      175KB

    • MD5

      2341409e476079b9dd42737bcd0b12e2

    • SHA1

      194a90c3e6c6668719e3d9a61b6b779fea9a645f

    • SHA256

      8b72e3dc9f6f9f4c5ba215c785daa0120e4eb7104acfe58279c8df83c3403dcb

    • SHA512

      31aeedf733aa876f6cf2d019d9c69d8a34bbf30f9fc6970468600ab48bedc0dc1a42bfbb2e541b1bee88a14f0091795a233d83d50ed07d6ffdfd87ece710da8d

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks