General

  • Target

    0x0006000000023292-369.dat

  • Size

    231KB

  • Sample

    231006-mpf3laaf5w

  • MD5

    5a7b58df898e310100be77dae861d71e

  • SHA1

    7cd75976cd605db553fae2371e24c644c6587977

  • SHA256

    ae17b56b6e015461cd55336ce924f74a500f2f2dabd35f91d127889761c5e4b3

  • SHA512

    61b052e7c982707941adfae022359ba68159ac5851e54eb00f82ad8d185a242b99d81265727ad27946916e71963858fb38cbca459a09439afb46859fb99b376a

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000023292-369.dat

    • Size

      231KB

    • MD5

      5a7b58df898e310100be77dae861d71e

    • SHA1

      7cd75976cd605db553fae2371e24c644c6587977

    • SHA256

      ae17b56b6e015461cd55336ce924f74a500f2f2dabd35f91d127889761c5e4b3

    • SHA512

      61b052e7c982707941adfae022359ba68159ac5851e54eb00f82ad8d185a242b99d81265727ad27946916e71963858fb38cbca459a09439afb46859fb99b376a

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks