General

  • Target

    0x0006000000014122-109.dat

  • Size

    172KB

  • Sample

    240308-gej4lshd6z

  • MD5

    499cb16e2c1a52c31782c05c372173c9

  • SHA1

    904a581f2c027dbf929134da3303d66d3f8139b0

  • SHA256

    22ed5ff6cf8bdae0b7e908c845f8e3517f03e0d64754163c4693aa12e047cb40

  • SHA512

    fbb73985c5b095390f1298aa3060cced2687130ab49df56d26a6f4e37acdea2f9259a574155811c757c7b1df71a0569dd705cfaea95eba7be850e06eea0aa1d2

  • SSDEEP

    1536:gtaPgzl736sv0W7Tp8JFrH4ySLn1nbAxNTIYQ/dbumgzeFra6l0GkR88e8hZ:g6gJBO0y6RbAxNjgOqFra6l/8e8hZ

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.129:19068

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x0006000000014122-109.dat

    • Size

      172KB

    • MD5

      499cb16e2c1a52c31782c05c372173c9

    • SHA1

      904a581f2c027dbf929134da3303d66d3f8139b0

    • SHA256

      22ed5ff6cf8bdae0b7e908c845f8e3517f03e0d64754163c4693aa12e047cb40

    • SHA512

      fbb73985c5b095390f1298aa3060cced2687130ab49df56d26a6f4e37acdea2f9259a574155811c757c7b1df71a0569dd705cfaea95eba7be850e06eea0aa1d2

    • SSDEEP

      1536:gtaPgzl736sv0W7Tp8JFrH4ySLn1nbAxNTIYQ/dbumgzeFra6l0GkR88e8hZ:g6gJBO0y6RbAxNjgOqFra6l/8e8hZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks