General

  • Target

    0x000600000002325d88_JC.dat

  • Size

    175KB

  • Sample

    230906-s5fdwsha8t

  • MD5

    8c5f7cfb596bbfbb838d5b81caf66ae8

  • SHA1

    9e0217ea1beb6b710ae04d54748e85f6d40bb70b

  • SHA256

    33211f0c16c01975625e82b266dead8456c803c8b085d0a2f46cabae0156f1d4

  • SHA512

    f50fdbcd001071e16139e20095f2dcfa0f216922b3ae583fbd26c1c3394bc8cf79db07d28ad7de83aa9371afb345c6b3659044892b28d4fe5119804a53852121

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      0x000600000002325d88_JC.dat

    • Size

      175KB

    • MD5

      8c5f7cfb596bbfbb838d5b81caf66ae8

    • SHA1

      9e0217ea1beb6b710ae04d54748e85f6d40bb70b

    • SHA256

      33211f0c16c01975625e82b266dead8456c803c8b085d0a2f46cabae0156f1d4

    • SHA512

      f50fdbcd001071e16139e20095f2dcfa0f216922b3ae583fbd26c1c3394bc8cf79db07d28ad7de83aa9371afb345c6b3659044892b28d4fe5119804a53852121

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks