General

  • Target

    0x0008000000012314-93.dat

  • Size

    168KB

  • Sample

    240307-x1cjnacf2w

  • MD5

    a0093802fdf5c4ce4218ad939f3805e0

  • SHA1

    3e2f323318e3fcbdbd9f5633b1ec9f48a6ca7953

  • SHA256

    691dea1c955884ac933ff9e6acde0a27d06dcb9e0457e11002a6cbc3d842e619

  • SHA512

    b9c25e16ce59385c410f575ac2d669c1a4e1c9c049edd884a95cc27ce5b56c189a99e52043875f5678b85de5542893f6f97a44de94cdba22f6f22e5652d4e877

  • SSDEEP

    3072:o3b2AH8WzSEXrWS0qVyMAFWqsvP2mwQM8e8hu:o3b5N/IJ0P2mwQM

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x0008000000012314-93.dat

    • Size

      168KB

    • MD5

      a0093802fdf5c4ce4218ad939f3805e0

    • SHA1

      3e2f323318e3fcbdbd9f5633b1ec9f48a6ca7953

    • SHA256

      691dea1c955884ac933ff9e6acde0a27d06dcb9e0457e11002a6cbc3d842e619

    • SHA512

      b9c25e16ce59385c410f575ac2d669c1a4e1c9c049edd884a95cc27ce5b56c189a99e52043875f5678b85de5542893f6f97a44de94cdba22f6f22e5652d4e877

    • SSDEEP

      3072:o3b2AH8WzSEXrWS0qVyMAFWqsvP2mwQM8e8hu:o3b5N/IJ0P2mwQM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks