General

  • Target

    d3d18f34a1494d87502f0ea05c56f6194e50610bc71f53653e15c98d25e57e62

  • Size

    269KB

  • Sample

    240502-gxk4madb95

  • MD5

    f97a56229d045c69e57ced05b232b47e

  • SHA1

    6fc187c34b895c0ecbf357db2cd931b96d55623e

  • SHA256

    d3d18f34a1494d87502f0ea05c56f6194e50610bc71f53653e15c98d25e57e62

  • SHA512

    c1c2dc4d3e1226309b45b814bf6eb1f2d607ad2f4d9d2374f068bc44e899d74415a77d76316ef84e149a5f1b0bb8fe0ca03e46aed0fea240d1503bdab2f9cb70

  • SSDEEP

    3072:cqBgyZEzcpiFToN/3rHpak/bjKVdRPBjgN1nPYkqoHUDIKNHQ44:c9FToN/7Hpak/HKpBjgN1jqfJH+

Malware Config

Extracted

Family

redline

Botnet

@oleh_ps

C2

194.169.175.235:42691

Targets

    • Target

      d3d18f34a1494d87502f0ea05c56f6194e50610bc71f53653e15c98d25e57e62

    • Size

      269KB

    • MD5

      f97a56229d045c69e57ced05b232b47e

    • SHA1

      6fc187c34b895c0ecbf357db2cd931b96d55623e

    • SHA256

      d3d18f34a1494d87502f0ea05c56f6194e50610bc71f53653e15c98d25e57e62

    • SHA512

      c1c2dc4d3e1226309b45b814bf6eb1f2d607ad2f4d9d2374f068bc44e899d74415a77d76316ef84e149a5f1b0bb8fe0ca03e46aed0fea240d1503bdab2f9cb70

    • SSDEEP

      3072:cqBgyZEzcpiFToN/3rHpak/bjKVdRPBjgN1nPYkqoHUDIKNHQ44:c9FToN/7Hpak/HKpBjgN1jqfJH+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks