General

  • Target

    0x00080000000122e2-2178.dat

  • Size

    168KB

  • Sample

    240304-pacgzahh3v

  • MD5

    76199ce7e6a2f7da1d742a72217112f5

  • SHA1

    b04ac4a1f2f84280323a74aed1f6f2ecfcb46942

  • SHA256

    0beec7eddd3bb3a8325e09efc7a5da44336361e0f1f512d682af65cea45c34fc

  • SHA512

    72ac7a705f480adb30bbd2cb9c97af178d3c5ca1cc7df3ddfcf94f24d028068ab8ed63c66feb718c63bd5a3ccd2cddc6e0cd3b83a2f8e7977b329fd016d5e29f

  • SSDEEP

    1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

Malware Config

Extracted

Family

redline

Botnet

diza

C2

77.91.124.145:4125

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Targets

    • Target

      0x00080000000122e2-2178.dat

    • Size

      168KB

    • MD5

      76199ce7e6a2f7da1d742a72217112f5

    • SHA1

      b04ac4a1f2f84280323a74aed1f6f2ecfcb46942

    • SHA256

      0beec7eddd3bb3a8325e09efc7a5da44336361e0f1f512d682af65cea45c34fc

    • SHA512

      72ac7a705f480adb30bbd2cb9c97af178d3c5ca1cc7df3ddfcf94f24d028068ab8ed63c66feb718c63bd5a3ccd2cddc6e0cd3b83a2f8e7977b329fd016d5e29f

    • SSDEEP

      1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks