General

  • Target

    0x0006000000023245-34.dat

  • Size

    173KB

  • Sample

    231011-yhndwahe2s

  • MD5

    61957c5a80d27efe136748ceaf852123

  • SHA1

    039a114f8bd8f572d67292a444669ec00ba285b7

  • SHA256

    2ed9f012becc627306f9de806b74125717ccfbd274553deba750a3770fa2fe02

  • SHA512

    b6c6f81f78101ddbd11936d1eb8e65b6eb5baf1fab56ee219c25250c691f7212d4eb791ee40dcdfb90f46e07bcf65ac9d63d8cdc8b288117451961b2f451b552

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Targets

    • Target

      0x0006000000023245-34.dat

    • Size

      173KB

    • MD5

      61957c5a80d27efe136748ceaf852123

    • SHA1

      039a114f8bd8f572d67292a444669ec00ba285b7

    • SHA256

      2ed9f012becc627306f9de806b74125717ccfbd274553deba750a3770fa2fe02

    • SHA512

      b6c6f81f78101ddbd11936d1eb8e65b6eb5baf1fab56ee219c25250c691f7212d4eb791ee40dcdfb90f46e07bcf65ac9d63d8cdc8b288117451961b2f451b552

    • SSDEEP

      3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks