General

  • Target

    0x0006000000023280-311.dat

  • Size

    230KB

  • Sample

    231007-118tmsab22

  • MD5

    8df2a225f9b54678573f2213522b2989

  • SHA1

    60e606273226b26392fb0381a65a2308ca69d23f

  • SHA256

    03775516af40fcfd36593c0e6ffccc1a46ddd4da6d14374684d6eae854bac2dd

  • SHA512

    de419efbfd2d79383c139cf69521490b0ae149052cb303d4ee8224033599afe96d995c091db51a47572d8531bedc82d1d36300439ff576152c6f98451bf21bb5

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000023280-311.dat

    • Size

      230KB

    • MD5

      8df2a225f9b54678573f2213522b2989

    • SHA1

      60e606273226b26392fb0381a65a2308ca69d23f

    • SHA256

      03775516af40fcfd36593c0e6ffccc1a46ddd4da6d14374684d6eae854bac2dd

    • SHA512

      de419efbfd2d79383c139cf69521490b0ae149052cb303d4ee8224033599afe96d995c091db51a47572d8531bedc82d1d36300439ff576152c6f98451bf21bb5

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks