General

  • Target

    0x000800000002326f-349.dat

  • Size

    231KB

  • Sample

    231006-krr7jaab8w

  • MD5

    6f80abe5be0e517b154d7982d341be7c

  • SHA1

    568acf31133ad6bac5889f60b60db0a5ceea42dc

  • SHA256

    c01bb67d46d84ca9c45a0d2ff50c2bc9766811c55adb814dd274c6e200f593a0

  • SHA512

    02b931db40fa739d0b6ac8026ae3dd61db970948105079c13ff4339a1ce69425ff713c02c2a5cc91c35c65895a34010e871e8aa0ae1da86e6cb461bc4ebc8a7c

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x000800000002326f-349.dat

    • Size

      231KB

    • MD5

      6f80abe5be0e517b154d7982d341be7c

    • SHA1

      568acf31133ad6bac5889f60b60db0a5ceea42dc

    • SHA256

      c01bb67d46d84ca9c45a0d2ff50c2bc9766811c55adb814dd274c6e200f593a0

    • SHA512

      02b931db40fa739d0b6ac8026ae3dd61db970948105079c13ff4339a1ce69425ff713c02c2a5cc91c35c65895a34010e871e8aa0ae1da86e6cb461bc4ebc8a7c

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks