General

  • Target

    4adc85f7e83346a5301ee658eeef247c.bin

  • Size

    223KB

  • Sample

    231030-bt2djsab5v

  • MD5

    4adc85f7e83346a5301ee658eeef247c

  • SHA1

    6ab667cfb05614666666f766c7920933b63d8ce9

  • SHA256

    eabd4e635e4467b6e7bed1b5c75455e34a5ace26a27fe9a9de6421e06b423106

  • SHA512

    ea4a535814c0317fb6d309dd8151384104018e55b847d1d327780f108702d1e81a8a84a277319d7e0f2615c8d4e2d2e78c712c61ddd17c82f398982ff9c66d10

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Targets

    • Target

      4adc85f7e83346a5301ee658eeef247c.bin

    • Size

      223KB

    • MD5

      4adc85f7e83346a5301ee658eeef247c

    • SHA1

      6ab667cfb05614666666f766c7920933b63d8ce9

    • SHA256

      eabd4e635e4467b6e7bed1b5c75455e34a5ace26a27fe9a9de6421e06b423106

    • SHA512

      ea4a535814c0317fb6d309dd8151384104018e55b847d1d327780f108702d1e81a8a84a277319d7e0f2615c8d4e2d2e78c712c61ddd17c82f398982ff9c66d10

    • SSDEEP

      3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks