General

  • Target

    0x0006000000023290-294.dat

  • Size

    230KB

  • Sample

    231008-q46hkseh22

  • MD5

    378826144071eea5b6ee7d82f3a651d4

  • SHA1

    a0bca711ccec44e29acad36bf184411f68b5338c

  • SHA256

    f8a35968f1ca5f17b5d7461e4f4a17caa5d5091c63d7c525dedbae96e1dd5f48

  • SHA512

    f71ea612f2bf303aef783844ad8c0fdddb91a0f68b78e8eab8fa8ec8e0a3293abd517ea2b61ae5280ccc373def246b37fdae3d6912db76bfe9ddbd2edf79dd9f

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000023290-294.dat

    • Size

      230KB

    • MD5

      378826144071eea5b6ee7d82f3a651d4

    • SHA1

      a0bca711ccec44e29acad36bf184411f68b5338c

    • SHA256

      f8a35968f1ca5f17b5d7461e4f4a17caa5d5091c63d7c525dedbae96e1dd5f48

    • SHA512

      f71ea612f2bf303aef783844ad8c0fdddb91a0f68b78e8eab8fa8ec8e0a3293abd517ea2b61ae5280ccc373def246b37fdae3d6912db76bfe9ddbd2edf79dd9f

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks