General

  • Target

    0x000700000002323c-73.dat

  • Size

    173KB

  • Sample

    231011-yhb1vabb33

  • MD5

    4ccc65f45f2b0741b0f68b56388e9cbb

  • SHA1

    2dada62c6c240825d28edf7c22966f92d50dfe4c

  • SHA256

    7e237442d8ab222321cc0101995ea3cf9c13192c453b0a94ba08d60fe667c847

  • SHA512

    4263b05d850eb485fbf949982b50b68318cb83c848ba7abe16babc9de90d939394510fd9708e029fccc28c8c4e812b03e9f84d7cbf5406ad80a4dd5d8b238228

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Targets

    • Target

      0x000700000002323c-73.dat

    • Size

      173KB

    • MD5

      4ccc65f45f2b0741b0f68b56388e9cbb

    • SHA1

      2dada62c6c240825d28edf7c22966f92d50dfe4c

    • SHA256

      7e237442d8ab222321cc0101995ea3cf9c13192c453b0a94ba08d60fe667c847

    • SHA512

      4263b05d850eb485fbf949982b50b68318cb83c848ba7abe16babc9de90d939394510fd9708e029fccc28c8c4e812b03e9f84d7cbf5406ad80a4dd5d8b238228

    • SSDEEP

      3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks