General

  • Target

    0x0006000000023215-133.dat

  • Size

    174KB

  • Sample

    231011-f8rvwaed22

  • MD5

    ddbaabf3daa09187639cbad84ebee899

  • SHA1

    cac6a7d0dd0e2ae6a1749e0681cc3e1aa07ad56c

  • SHA256

    91100e3800e148278e902e962aeda49c42bc2b3ac8e02f451320e668090a66c7

  • SHA512

    923fee63a43ecdf139a40777fce52641893c225e7b8c5680171ec7e74700754a0f7b57442610779ab4dfba201acd9feab8d557625fdefed71faba1d7b4fb08c7

  • SSDEEP

    3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42

Malware Config

Extracted

Family

redline

Botnet

luska

C2

77.91.124.55:19071

Attributes
  • auth_value

    a6797888f51a88afbfd8854a79ac9357

Targets

    • Target

      0x0006000000023215-133.dat

    • Size

      174KB

    • MD5

      ddbaabf3daa09187639cbad84ebee899

    • SHA1

      cac6a7d0dd0e2ae6a1749e0681cc3e1aa07ad56c

    • SHA256

      91100e3800e148278e902e962aeda49c42bc2b3ac8e02f451320e668090a66c7

    • SHA512

      923fee63a43ecdf139a40777fce52641893c225e7b8c5680171ec7e74700754a0f7b57442610779ab4dfba201acd9feab8d557625fdefed71faba1d7b4fb08c7

    • SSDEEP

      3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks