General

  • Target

    0x0006000000023212-33.dat

  • Size

    174KB

  • Sample

    231011-mp6cgsbc26

  • MD5

    42a4749ba19e1c2cf0aaf6cc7282578d

  • SHA1

    a5bf83b5b54ed60600c81c0425fb0bb2dcde14d9

  • SHA256

    297592ac715f4a795e5ba90c83cecdac8855e601488c6fad15c92e33c5b8a7c7

  • SHA512

    75f1e5d8a891d58b6c527d77fb79d7c0dedc40f7a6f4a53c2616cc40a7afb06bda3c887e1b9aeb47ad888ebaece01740da678b954ceb1e8d95ac42e38d1453cd

  • SSDEEP

    3072:HmVenX0I0V916dOBCymtjvqE0WIkuvwJx8e8hN:Hmq0I0V9161DqE0Vvwn

Malware Config

Extracted

Family

redline

Botnet

luate

C2

77.91.124.55:19071

Attributes
  • auth_value

    e45cd419aba6c9d372088ffe5629308b

Targets

    • Target

      0x0006000000023212-33.dat

    • Size

      174KB

    • MD5

      42a4749ba19e1c2cf0aaf6cc7282578d

    • SHA1

      a5bf83b5b54ed60600c81c0425fb0bb2dcde14d9

    • SHA256

      297592ac715f4a795e5ba90c83cecdac8855e601488c6fad15c92e33c5b8a7c7

    • SHA512

      75f1e5d8a891d58b6c527d77fb79d7c0dedc40f7a6f4a53c2616cc40a7afb06bda3c887e1b9aeb47ad888ebaece01740da678b954ceb1e8d95ac42e38d1453cd

    • SSDEEP

      3072:HmVenX0I0V916dOBCymtjvqE0WIkuvwJx8e8hN:Hmq0I0V9161DqE0Vvwn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks