General

  • Target

    d3273119.exe

  • Size

    173KB

  • Sample

    250127-m1yrsavnet

  • MD5

    55984930bdb53dfd857a1f5f341b6416

  • SHA1

    84705ca441a0d675586eb209b928306532389669

  • SHA256

    392b75a020b74ef9642495817e3ceb3eb2efdf1c92f5da72bb6f3e592f8afcb3

  • SHA512

    3a14415e362d0309f4d2d00dea0ddb2b9ea45b7007bc266304d5b08916bb8294345534afaa99b6a48606b9b1bd838ca4e4d1a59c97fa88ea26a5381e207c1cff

  • SSDEEP

    3072:R4JIS1NRQbKVViK+xNra7W5ii8eU8e8h0:R4fZ2Hii8eU

Malware Config

Extracted

Family

redline

Botnet

krast

C2

77.91.68.68:19071

Attributes
  • auth_value

    9059ea331e4599de3746df73ccb24514

Targets

    • Target

      d3273119.exe

    • Size

      173KB

    • MD5

      55984930bdb53dfd857a1f5f341b6416

    • SHA1

      84705ca441a0d675586eb209b928306532389669

    • SHA256

      392b75a020b74ef9642495817e3ceb3eb2efdf1c92f5da72bb6f3e592f8afcb3

    • SHA512

      3a14415e362d0309f4d2d00dea0ddb2b9ea45b7007bc266304d5b08916bb8294345534afaa99b6a48606b9b1bd838ca4e4d1a59c97fa88ea26a5381e207c1cff

    • SSDEEP

      3072:R4JIS1NRQbKVViK+xNra7W5ii8eU8e8h0:R4fZ2Hii8eU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.