General

  • Target

    0x0006000000023210-97.dat

  • Size

    221KB

  • Sample

    231009-kba83sbe6w

  • MD5

    2be184954f65d2fd59f3604f502bbacf

  • SHA1

    febaaf0671a2da80b0a7c31129ae1c378858d726

  • SHA256

    6161bb399a61cc0cccc885383a6a2b1ec94d2058ece9aad7e9d9677a33ca6165

  • SHA512

    11fe1ffec5569653a9883a127ef9e5c3ab721a69f78586ab77b66de646e4419c7cbc678125715070f5d45794ed13fdb7537b8ee4da0828259b22a5cd0326fb24

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Targets

    • Target

      0x0006000000023210-97.dat

    • Size

      221KB

    • MD5

      2be184954f65d2fd59f3604f502bbacf

    • SHA1

      febaaf0671a2da80b0a7c31129ae1c378858d726

    • SHA256

      6161bb399a61cc0cccc885383a6a2b1ec94d2058ece9aad7e9d9677a33ca6165

    • SHA512

      11fe1ffec5569653a9883a127ef9e5c3ab721a69f78586ab77b66de646e4419c7cbc678125715070f5d45794ed13fdb7537b8ee4da0828259b22a5cd0326fb24

    • SSDEEP

      3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks