General

  • Target

    9ba7b0bcc2c50d90691604605c997050_exe32.exe

  • Size

    221KB

  • Sample

    231015-yejarafb63

  • MD5

    9ba7b0bcc2c50d90691604605c997050

  • SHA1

    61970bc72559f37c99346f76989c552281bfa21b

  • SHA256

    ed407f57655bc99c43cecdeff1921c4a294a17c4fbfc4a6d91181da8e5267f7b

  • SHA512

    55a59e59e81ff928692a61fa9d57e032ec8ccbb90a4bb9275972b1831b7cee4cffbd6d421adc743fcfa041a5fcdfad0fd617ed44515236985268d9812a8cb7bb

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Targets

    • Target

      9ba7b0bcc2c50d90691604605c997050_exe32.exe

    • Size

      221KB

    • MD5

      9ba7b0bcc2c50d90691604605c997050

    • SHA1

      61970bc72559f37c99346f76989c552281bfa21b

    • SHA256

      ed407f57655bc99c43cecdeff1921c4a294a17c4fbfc4a6d91181da8e5267f7b

    • SHA512

      55a59e59e81ff928692a61fa9d57e032ec8ccbb90a4bb9275972b1831b7cee4cffbd6d421adc743fcfa041a5fcdfad0fd617ed44515236985268d9812a8cb7bb

    • SSDEEP

      3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks