General

  • Target

    0x000700000001269f-146.dat

  • Size

    176KB

  • Sample

    240302-m2967sce9z

  • MD5

    b97201d1e129189102564257fc92f3b2

  • SHA1

    67b711134fe5a8256b9213af113197d99e0f1c99

  • SHA256

    224b0eadcf72e0f244e774906812f4281939ff8a610e881f73ddce2099c47479

  • SHA512

    35dc60e3773ca7315f8357a294dc4d4e834ef518b92ca1c7da5b2bb8f6c3ab4b1ee181606cc36ac175b2e452602e388f410283337a60d8e6cb96e57471708a90

  • SSDEEP

    3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

Malware Config

Extracted

Family

redline

Botnet

fabio

C2

193.233.20.27:4123

Attributes
  • auth_value

    56b82736c3f56b13be8e64c87d2cf9e5

Targets

    • Target

      0x000700000001269f-146.dat

    • Size

      176KB

    • MD5

      b97201d1e129189102564257fc92f3b2

    • SHA1

      67b711134fe5a8256b9213af113197d99e0f1c99

    • SHA256

      224b0eadcf72e0f244e774906812f4281939ff8a610e881f73ddce2099c47479

    • SHA512

      35dc60e3773ca7315f8357a294dc4d4e834ef518b92ca1c7da5b2bb8f6c3ab4b1ee181606cc36ac175b2e452602e388f410283337a60d8e6cb96e57471708a90

    • SSDEEP

      3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks