General

  • Target

    8a865147706fae83eaf427c54aa03502.bin

  • Size

    221KB

  • Sample

    231011-cj4llabg87

  • MD5

    8a865147706fae83eaf427c54aa03502

  • SHA1

    efb346b75463e94bf1534d68ce1e5bf72ad35567

  • SHA256

    7ac2166459f9eb647e3603eb120354bdd3b8450ce0d2c7388d1d2ef50fd2175e

  • SHA512

    95f092c9e3cbce2b0157a96339e6d53bd760b6c7999c384c93e0750f2fd2f9ad766ee7cd020b0d9ba4b5b7b189cf604c12c1238846ceb3c0128f0a28b4866cf1

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Targets

    • Target

      8a865147706fae83eaf427c54aa03502.bin

    • Size

      221KB

    • MD5

      8a865147706fae83eaf427c54aa03502

    • SHA1

      efb346b75463e94bf1534d68ce1e5bf72ad35567

    • SHA256

      7ac2166459f9eb647e3603eb120354bdd3b8450ce0d2c7388d1d2ef50fd2175e

    • SHA512

      95f092c9e3cbce2b0157a96339e6d53bd760b6c7999c384c93e0750f2fd2f9ad766ee7cd020b0d9ba4b5b7b189cf604c12c1238846ceb3c0128f0a28b4866cf1

    • SSDEEP

      3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks