General

  • Target

    c77f804eeb098929ca50c7885672cc80_NeikiAnalytics.exe

  • Size

    272KB

  • Sample

    240525-rrgt5aga69

  • MD5

    c77f804eeb098929ca50c7885672cc80

  • SHA1

    c666548c24ba8751356873af00c4136517060ee8

  • SHA256

    2b0e6da498576f68dc1b7d15ae01f3a85a79fc60c9e87c0cba6ed809cce25392

  • SHA512

    dd9514577b973b7079b53270b56168d37f8de6830e135fdf913d81de27d72ebe0bbaa7da95646a2bad75b4c4c6241b6980eaa02a4f472f8af1218ee22157d2b2

  • SSDEEP

    6144:uXariX2WQ0FKHgKNRBH13TLxNP9T0x+SRMk:u6iTQzgMLxNFYv

Malware Config

Extracted

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target

      c77f804eeb098929ca50c7885672cc80_NeikiAnalytics.exe

    • Size

      272KB

    • MD5

      c77f804eeb098929ca50c7885672cc80

    • SHA1

      c666548c24ba8751356873af00c4136517060ee8

    • SHA256

      2b0e6da498576f68dc1b7d15ae01f3a85a79fc60c9e87c0cba6ed809cce25392

    • SHA512

      dd9514577b973b7079b53270b56168d37f8de6830e135fdf913d81de27d72ebe0bbaa7da95646a2bad75b4c4c6241b6980eaa02a4f472f8af1218ee22157d2b2

    • SSDEEP

      6144:uXariX2WQ0FKHgKNRBH13TLxNP9T0x+SRMk:u6iTQzgMLxNFYv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks