General

  • Target

    0x00070000000231bc-34.dat

  • Size

    173KB

  • Sample

    231011-y4bbfabb7x

  • MD5

    84ecf8963b65a9f9e06ddfb005438bae

  • SHA1

    4a6e65d601ab13bc57848c87c7b75048bc9358e1

  • SHA256

    55b7d416e51188049d35c18c3b92e1670cd4b4972e5bee397b1aa6124450435b

  • SHA512

    53a4b09ea8d54e21a3ca70b8b10b4825b43232258ea26fedd4570c09df8365fce2057b9637d64c3f356de07dbb030b04d3d3958e156beeebabfd0a11a0ed6cd1

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Targets

    • Target

      0x00070000000231bc-34.dat

    • Size

      173KB

    • MD5

      84ecf8963b65a9f9e06ddfb005438bae

    • SHA1

      4a6e65d601ab13bc57848c87c7b75048bc9358e1

    • SHA256

      55b7d416e51188049d35c18c3b92e1670cd4b4972e5bee397b1aa6124450435b

    • SHA512

      53a4b09ea8d54e21a3ca70b8b10b4825b43232258ea26fedd4570c09df8365fce2057b9637d64c3f356de07dbb030b04d3d3958e156beeebabfd0a11a0ed6cd1

    • SSDEEP

      3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks