General

  • Target

    0x0006000000014140-109.dat

  • Size

    172KB

  • Sample

    240308-am65sabb51

  • MD5

    98db40fd7b9922b16f0ab64e4af487d8

  • SHA1

    c7f247901a8f841ccf2a73f7634a695c24a1bb65

  • SHA256

    8ebf4085b0d273edb9a51b83c26e25fe0041879b75d46ff0dee73e0678cfdce9

  • SHA512

    d67b0536fe98892deba5b9a1c2f8f123d8ac57716d305e47ae48d3552fd9d8bf60a39f7a7996f4e31431b7fa7cad9248a32c3ab74ae6c53874486367eb231b49

  • SSDEEP

    3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.126:19048

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Targets

    • Target

      0x0006000000014140-109.dat

    • Size

      172KB

    • MD5

      98db40fd7b9922b16f0ab64e4af487d8

    • SHA1

      c7f247901a8f841ccf2a73f7634a695c24a1bb65

    • SHA256

      8ebf4085b0d273edb9a51b83c26e25fe0041879b75d46ff0dee73e0678cfdce9

    • SHA512

      d67b0536fe98892deba5b9a1c2f8f123d8ac57716d305e47ae48d3552fd9d8bf60a39f7a7996f4e31431b7fa7cad9248a32c3ab74ae6c53874486367eb231b49

    • SSDEEP

      3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks