General

  • Target

    d3273119.exe

  • Size

    173KB

  • Sample

    250127-m53xasvqay

  • MD5

    55984930bdb53dfd857a1f5f341b6416

  • SHA1

    84705ca441a0d675586eb209b928306532389669

  • SHA256

    392b75a020b74ef9642495817e3ceb3eb2efdf1c92f5da72bb6f3e592f8afcb3

  • SHA512

    3a14415e362d0309f4d2d00dea0ddb2b9ea45b7007bc266304d5b08916bb8294345534afaa99b6a48606b9b1bd838ca4e4d1a59c97fa88ea26a5381e207c1cff

  • SSDEEP

    3072:R4JIS1NRQbKVViK+xNra7W5ii8eU8e8h0:R4fZ2Hii8eU

Malware Config

Extracted

Family

redline

Botnet

krast

C2

77.91.68.68:19071

Attributes
  • auth_value

    9059ea331e4599de3746df73ccb24514

Targets

    • Target

      d3273119.exe

    • Size

      173KB

    • MD5

      55984930bdb53dfd857a1f5f341b6416

    • SHA1

      84705ca441a0d675586eb209b928306532389669

    • SHA256

      392b75a020b74ef9642495817e3ceb3eb2efdf1c92f5da72bb6f3e592f8afcb3

    • SHA512

      3a14415e362d0309f4d2d00dea0ddb2b9ea45b7007bc266304d5b08916bb8294345534afaa99b6a48606b9b1bd838ca4e4d1a59c97fa88ea26a5381e207c1cff

    • SSDEEP

      3072:R4JIS1NRQbKVViK+xNra7W5ii8eU8e8h0:R4fZ2Hii8eU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks