General

  • Target

    0x00080000000122e1-83.dat

  • Size

    145KB

  • Sample

    240307-k78t8ahb3t

  • MD5

    e848e4f95209443e5f1b25508bc5f840

  • SHA1

    587482aa0f0d520fa4638fd9b03721a3d8969b9c

  • SHA256

    5eef62986fe2c19c4e1cb41494a83ef8cb3a326b8dd548294c432ab4d8adf31e

  • SHA512

    a944c4505b8f368d3cdfe557fdf4ce0f7c42a7c802927722d4aa29565d2d879e6924c620d22fcad47fedc95e2abe51722851146e1a3fe5f0c62bda4e1d763642

  • SSDEEP

    3072:6V+m5cDQmRSgEZtDMucQTzIXNnpjKhUZp8e8hQ:6j6M7csYNnFKhUz

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.122:19062

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Targets

    • Target

      0x00080000000122e1-83.dat

    • Size

      145KB

    • MD5

      e848e4f95209443e5f1b25508bc5f840

    • SHA1

      587482aa0f0d520fa4638fd9b03721a3d8969b9c

    • SHA256

      5eef62986fe2c19c4e1cb41494a83ef8cb3a326b8dd548294c432ab4d8adf31e

    • SHA512

      a944c4505b8f368d3cdfe557fdf4ce0f7c42a7c802927722d4aa29565d2d879e6924c620d22fcad47fedc95e2abe51722851146e1a3fe5f0c62bda4e1d763642

    • SSDEEP

      3072:6V+m5cDQmRSgEZtDMucQTzIXNnpjKhUZp8e8hQ:6j6M7csYNnFKhUz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks