General

  • Target

    0x000600000002324d-354.dat

  • Size

    231KB

  • Sample

    231012-hz7wvadb8z

  • MD5

    d0165cebe4443ac7f5d2b8c85f89f3bd

  • SHA1

    5caa5137538f3363cf02188bf59066ca351f5f1b

  • SHA256

    22b8bf3184007ff96e992a4b2aa7892b2463c49c9ebea52a21e8a3b774f9014a

  • SHA512

    75cbae061efb3a1acbbdf6f5becd9e96e57dd06fec84e22cde1bb735569160935f388899c4f7d0ef39e7cacacb5606f1e691b470823fc24dd5836fc0db0e4343

  • SSDEEP

    3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

Malware Config

Extracted

Family

redline

Botnet

gigant

C2

77.91.124.55:19071

Targets

    • Target

      0x000600000002324d-354.dat

    • Size

      231KB

    • MD5

      d0165cebe4443ac7f5d2b8c85f89f3bd

    • SHA1

      5caa5137538f3363cf02188bf59066ca351f5f1b

    • SHA256

      22b8bf3184007ff96e992a4b2aa7892b2463c49c9ebea52a21e8a3b774f9014a

    • SHA512

      75cbae061efb3a1acbbdf6f5becd9e96e57dd06fec84e22cde1bb735569160935f388899c4f7d0ef39e7cacacb5606f1e691b470823fc24dd5836fc0db0e4343

    • SSDEEP

      3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks