General

  • Target

    NEAS.b90e5b7dd4cc02f113efcced95b99b60.exe

  • Size

    222KB

  • Sample

    231101-eyvy4sac9s

  • MD5

    b90e5b7dd4cc02f113efcced95b99b60

  • SHA1

    e463b43f88992680b97e281c0d6e9ad45172bfbc

  • SHA256

    e30cb6140340341e7ee900733d8181a8c710dab9ee6c602bddabf2162d0e084e

  • SHA512

    925ce2638bbd9f410647906f5c9217db2f9f2819913317e280fc285c03faa37774d2e89edfaa6fc26e7e7c2f13acf31607b5ada8a29b2216bea198be101268cb

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Targets

    • Target

      NEAS.b90e5b7dd4cc02f113efcced95b99b60.exe

    • Size

      222KB

    • MD5

      b90e5b7dd4cc02f113efcced95b99b60

    • SHA1

      e463b43f88992680b97e281c0d6e9ad45172bfbc

    • SHA256

      e30cb6140340341e7ee900733d8181a8c710dab9ee6c602bddabf2162d0e084e

    • SHA512

      925ce2638bbd9f410647906f5c9217db2f9f2819913317e280fc285c03faa37774d2e89edfaa6fc26e7e7c2f13acf31607b5ada8a29b2216bea198be101268cb

    • SSDEEP

      6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks