General

  • Target

    file.exe

  • Size

    460KB

  • Sample

    221202-vlbbyabe41

  • MD5

    c3ab1b8692ec7fe015b8bd9cb712ec72

  • SHA1

    973cc90416b8b838e3a65c41fd8675a960aa39a6

  • SHA256

    7d9d1c4cd9f762f89b84cca8e6c5a427dc2a2c2b8d87a9094b9879851a3b42fb

  • SHA512

    240ee2f32e504d41f0232273d823477fe89f2eae25c2dc38c11c1e57c608c9e76e7f597be48fb795dc05c15840ffd0490e6da5bb59a986a13e8148c97e61ccd2

  • SSDEEP

    6144:5vDLvnU/nK7R0H/fw3Nbsp3KffZGXzRe8aFyF/2AxMuRjMgU:5Lzn2K7mfwup3K3ZEzRe8aFyF/phRQg

Malware Config

Extracted

Family

redline

Botnet

NewDef2023

C2

185.106.92.214:2510

Attributes
  • auth_value

    048f34b18865578890538db10b2e9edf

Targets

    • Target

      file.exe

    • Size

      460KB

    • MD5

      c3ab1b8692ec7fe015b8bd9cb712ec72

    • SHA1

      973cc90416b8b838e3a65c41fd8675a960aa39a6

    • SHA256

      7d9d1c4cd9f762f89b84cca8e6c5a427dc2a2c2b8d87a9094b9879851a3b42fb

    • SHA512

      240ee2f32e504d41f0232273d823477fe89f2eae25c2dc38c11c1e57c608c9e76e7f597be48fb795dc05c15840ffd0490e6da5bb59a986a13e8148c97e61ccd2

    • SSDEEP

      6144:5vDLvnU/nK7R0H/fw3Nbsp3KffZGXzRe8aFyF/2AxMuRjMgU:5Lzn2K7mfwup3K3ZEzRe8aFyF/phRQg

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks