General

  • Target

    0x00060000000231eb-41.dat

  • Size

    221KB

  • Sample

    231013-qabfcahh5x

  • MD5

    0c8b5c69519caa50d85c70d7db5b93e1

  • SHA1

    bfa99e6617a75efdc1a284aff947161e95e78d78

  • SHA256

    97e7d4be2b965ae227a8d699ef2d3cc09edae97539fa8e2289d07ad835a8c752

  • SHA512

    92233e56f02788986c8b200620d3e48f8ed7a697db430164f49e1aa8cf9e039a606bc13782b052b0258c81982d04c975a1a6a6cee5cc8518b996b6c29e21798a

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Targets

    • Target

      0x00060000000231eb-41.dat

    • Size

      221KB

    • MD5

      0c8b5c69519caa50d85c70d7db5b93e1

    • SHA1

      bfa99e6617a75efdc1a284aff947161e95e78d78

    • SHA256

      97e7d4be2b965ae227a8d699ef2d3cc09edae97539fa8e2289d07ad835a8c752

    • SHA512

      92233e56f02788986c8b200620d3e48f8ed7a697db430164f49e1aa8cf9e039a606bc13782b052b0258c81982d04c975a1a6a6cee5cc8518b996b6c29e21798a

    • SSDEEP

      3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks