General

  • Target

    0x000600000002325b-347.dat

  • Size

    231KB

  • Sample

    231010-p3w23sfe57

  • MD5

    650b70dc0a02f8ae12e56c9d74a589fb

  • SHA1

    3dff4475ff5db93d06f91fa2a6818005c2ab0073

  • SHA256

    f6720c12636f70dca6766cece3ca09c64b447b2dd4b51da92e93e5b1fc904015

  • SHA512

    808d966754a00b37a3a02dea6675888372d8e2f172f4aafe7687d28fc49db61afb5109203bf545e6d5c79ebeae952239dd16447d19f3ea4d418b77d5da80b88f

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x000600000002325b-347.dat

    • Size

      231KB

    • MD5

      650b70dc0a02f8ae12e56c9d74a589fb

    • SHA1

      3dff4475ff5db93d06f91fa2a6818005c2ab0073

    • SHA256

      f6720c12636f70dca6766cece3ca09c64b447b2dd4b51da92e93e5b1fc904015

    • SHA512

      808d966754a00b37a3a02dea6675888372d8e2f172f4aafe7687d28fc49db61afb5109203bf545e6d5c79ebeae952239dd16447d19f3ea4d418b77d5da80b88f

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks