General

  • Target

    0x00060000000231d7-67.dat

  • Size

    230KB

  • Sample

    231010-dl7xgacd49

  • MD5

    b5c1f92ec8130e5ecc3c682e2e04b986

  • SHA1

    f61319cf5559f22f813d5750124a827feff8eb44

  • SHA256

    e95339e55feb119302641634660c3e5bdbf5419a8d2492e7f4f219d724e305bf

  • SHA512

    186b92a91c767319802ecc53a42d8492b6eb977f77e4b100f36b7b205b400fbcbf3b87225ceed7d439a3d5404f08b82421900d6751fbd7c35811aa7f00ff324b

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x00060000000231d7-67.dat

    • Size

      230KB

    • MD5

      b5c1f92ec8130e5ecc3c682e2e04b986

    • SHA1

      f61319cf5559f22f813d5750124a827feff8eb44

    • SHA256

      e95339e55feb119302641634660c3e5bdbf5419a8d2492e7f4f219d724e305bf

    • SHA512

      186b92a91c767319802ecc53a42d8492b6eb977f77e4b100f36b7b205b400fbcbf3b87225ceed7d439a3d5404f08b82421900d6751fbd7c35811aa7f00ff324b

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks