General

  • Target

    0x0006000000023252-34.dat

  • Size

    174KB

  • Sample

    231011-rg8vvscc7z

  • MD5

    1dbf299407ec6af3052da6278ee118d8

  • SHA1

    ecfbb056fd0a217502214aaf606ee0b2531f2444

  • SHA256

    02801f9df5848ceef150b97b5f09d5bc315ce98e053e13d183cb357d325cc125

  • SHA512

    f9ccaf812c573a439a0a8d9a58d5bd343862904fe13e62aa742b1eed92d4348d0b6bfd0064c64850a997941f6cdc8c18997f04018ccc7f53754d59fdcb64424e

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Targets

    • Target

      0x0006000000023252-34.dat

    • Size

      174KB

    • MD5

      1dbf299407ec6af3052da6278ee118d8

    • SHA1

      ecfbb056fd0a217502214aaf606ee0b2531f2444

    • SHA256

      02801f9df5848ceef150b97b5f09d5bc315ce98e053e13d183cb357d325cc125

    • SHA512

      f9ccaf812c573a439a0a8d9a58d5bd343862904fe13e62aa742b1eed92d4348d0b6bfd0064c64850a997941f6cdc8c18997f04018ccc7f53754d59fdcb64424e

    • SSDEEP

      3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks