General

  • Target

    7bc6903502a04b379047bb649a5d364c.exe

  • Size

    380KB

  • Sample

    231210-tvx2mafhdp

  • MD5

    7bc6903502a04b379047bb649a5d364c

  • SHA1

    4ee8c4a0411b938fc7a2f641905bfa3b276830d5

  • SHA256

    65befbbadf131fadbdc58f2760b7135a280632d7efd214433e5b9881cd4e54d0

  • SHA512

    448973da37f963f2eb7355d324d546f42f23c67886c715406f125ae5f7ed8ce08a8be8026427519685c1ef3a6c5c77e11feb9334a13115f52ddf73f352339299

  • SSDEEP

    6144:5mFqTIk4P+aqUidMUOB/Vq4/7HlM8Xfz22BQO6w:m1PjqUidMUeNq4jxfzw

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

185.81.68.115:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Targets

    • Target

      7bc6903502a04b379047bb649a5d364c.exe

    • Size

      380KB

    • MD5

      7bc6903502a04b379047bb649a5d364c

    • SHA1

      4ee8c4a0411b938fc7a2f641905bfa3b276830d5

    • SHA256

      65befbbadf131fadbdc58f2760b7135a280632d7efd214433e5b9881cd4e54d0

    • SHA512

      448973da37f963f2eb7355d324d546f42f23c67886c715406f125ae5f7ed8ce08a8be8026427519685c1ef3a6c5c77e11feb9334a13115f52ddf73f352339299

    • SSDEEP

      6144:5mFqTIk4P+aqUidMUOB/Vq4/7HlM8Xfz22BQO6w:m1PjqUidMUeNq4jxfzw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks