General

  • Target

    038f62be77cd59199a6ed8fce8686d93.exe

  • Size

    95KB

  • Sample

    221123-3pesjach85

  • MD5

    038f62be77cd59199a6ed8fce8686d93

  • SHA1

    f9f0748d73b56a0f3423a0cd82ece170e7825ac4

  • SHA256

    25859ba3aba160a006626908aef75f504e5e6bc04bd7b518bbe35f3ef002b42d

  • SHA512

    a1dde768b76c9dc5cd6333e33f1b2a8c2f65fc013f3e16c437df219ef008a6f0dbbe72c442c563c81702620af93c86b20af19e2ec1f4e61c43aa8b23f53889ad

  • SSDEEP

    1536:Bqs0FRcqWClbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2itmulgS6pUl:v0RclyY7+zi0ZbYe1g0ujyzdWU

Malware Config

Extracted

Family

redline

Botnet

main

C2

45.15.157.9:4228

Targets

    • Target

      038f62be77cd59199a6ed8fce8686d93.exe

    • Size

      95KB

    • MD5

      038f62be77cd59199a6ed8fce8686d93

    • SHA1

      f9f0748d73b56a0f3423a0cd82ece170e7825ac4

    • SHA256

      25859ba3aba160a006626908aef75f504e5e6bc04bd7b518bbe35f3ef002b42d

    • SHA512

      a1dde768b76c9dc5cd6333e33f1b2a8c2f65fc013f3e16c437df219ef008a6f0dbbe72c442c563c81702620af93c86b20af19e2ec1f4e61c43aa8b23f53889ad

    • SSDEEP

      1536:Bqs0FRcqWClbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2itmulgS6pUl:v0RclyY7+zi0ZbYe1g0ujyzdWU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks