General

  • Target

    0x00060000000231f8-113.dat

  • Size

    231KB

  • Sample

    231010-2pe8maab74

  • MD5

    ea876aa5bc08e99e182abd542079549f

  • SHA1

    89c5a672f1c2f628a1b2c509db14823e181a3f33

  • SHA256

    d1519d0efd19b8b8c5595f2d071bc07a30b11ab152f7957df93dc4fff963d812

  • SHA512

    c6777205653473a71ffc17fec9646241c61906da8589b0cea93db366257baf31fff0504a90d460ea4dfe8f776645bbd733385e31d7c76449db8a37b2bfdd2ff4

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x00060000000231f8-113.dat

    • Size

      231KB

    • MD5

      ea876aa5bc08e99e182abd542079549f

    • SHA1

      89c5a672f1c2f628a1b2c509db14823e181a3f33

    • SHA256

      d1519d0efd19b8b8c5595f2d071bc07a30b11ab152f7957df93dc4fff963d812

    • SHA512

      c6777205653473a71ffc17fec9646241c61906da8589b0cea93db366257baf31fff0504a90d460ea4dfe8f776645bbd733385e31d7c76449db8a37b2bfdd2ff4

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks