General

  • Target

    0x00090000000122e6-2180.dat

  • Size

    169KB

  • Sample

    240304-px2elsae4s

  • MD5

    9b26d24bd2819c4d295a588e063664ad

  • SHA1

    84738148079b1291d736a433047973d08128450f

  • SHA256

    4db5fd53023847ba0c5b6dceb5f8fb3786bbc581f3985da40af5bf3cc0980edd

  • SHA512

    358d1749569113726e1caa5f4ec019f7996e6e659edf00da79974519cd7e2b7aad6d753b70a01cab54d085191eb35efbb791fe884b260bd4a6ac4485ffcff95d

  • SSDEEP

    1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

Malware Config

Extracted

Family

redline

Botnet

diza

C2

77.91.124.145:4125

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Targets

    • Target

      0x00090000000122e6-2180.dat

    • Size

      169KB

    • MD5

      9b26d24bd2819c4d295a588e063664ad

    • SHA1

      84738148079b1291d736a433047973d08128450f

    • SHA256

      4db5fd53023847ba0c5b6dceb5f8fb3786bbc581f3985da40af5bf3cc0980edd

    • SHA512

      358d1749569113726e1caa5f4ec019f7996e6e659edf00da79974519cd7e2b7aad6d753b70a01cab54d085191eb35efbb791fe884b260bd4a6ac4485ffcff95d

    • SSDEEP

      1536:jyOHBgqlVZRGWQ3ZrrQUYH9izdOzu2dTGqVibuTjNkZOjgAVU83wYke8e8hf:jyOhyTI7YqV2KqZOjgAVUw8e8hf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks