General

  • Target

    0x0007000000018b3892_JC.dat

  • Size

    174KB

  • Sample

    230906-s64g4shb48

  • MD5

    a094f0f35236c14fdd6153ecf0c76790

  • SHA1

    30cf7e4ce1636c65c26f8f689a89ee55e73777cc

  • SHA256

    067eba59fdee00d725ab58488d7c66c2f725c43553a788a101901a5b6d87aa9b

  • SHA512

    681dced5b384710a0cde12a7e393ebc4b190701d3a3c4821850c523a038a2c3ca19e3f9145fee3a99f835aa134f0e127baf39579d7fa8fdb967c845be326c611

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      0x0007000000018b3892_JC.dat

    • Size

      174KB

    • MD5

      a094f0f35236c14fdd6153ecf0c76790

    • SHA1

      30cf7e4ce1636c65c26f8f689a89ee55e73777cc

    • SHA256

      067eba59fdee00d725ab58488d7c66c2f725c43553a788a101901a5b6d87aa9b

    • SHA512

      681dced5b384710a0cde12a7e393ebc4b190701d3a3c4821850c523a038a2c3ca19e3f9145fee3a99f835aa134f0e127baf39579d7fa8fdb967c845be326c611

    • SSDEEP

      3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks