General

  • Target

    0x00060000000230d3-398.dat

  • Size

    231KB

  • Sample

    231010-29vttagh4v

  • MD5

    597cae3ea3b66b8397993c121688eb31

  • SHA1

    2aadb39b85a1be1e90fe80ab5931e1459c31113a

  • SHA256

    ed4203521aaf0b327b9252befb467936dc4a2752f16856451a843cb5c515d6d5

  • SHA512

    c96ea66ae1af79151b11d7d5957f8bbae04fc47177d93ad0db263405a1d0426086fcbb578629d92c66c1b366d20ea22ab5894d8586c66dc2ed62fc4ff01a85d1

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x00060000000230d3-398.dat

    • Size

      231KB

    • MD5

      597cae3ea3b66b8397993c121688eb31

    • SHA1

      2aadb39b85a1be1e90fe80ab5931e1459c31113a

    • SHA256

      ed4203521aaf0b327b9252befb467936dc4a2752f16856451a843cb5c515d6d5

    • SHA512

      c96ea66ae1af79151b11d7d5957f8bbae04fc47177d93ad0db263405a1d0426086fcbb578629d92c66c1b366d20ea22ab5894d8586c66dc2ed62fc4ff01a85d1

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks