General

  • Target

    output.bin

  • Size

    304KB

  • Sample

    240410-3m7qjahe7y

  • MD5

    09c25a0198eb2d54a9a38d333df61c5c

  • SHA1

    cd3a1e21600d38a5e2bc3504235e71f41b36925e

  • SHA256

    a3134aa354a8411a6156055b2bc877621a5d9edf24a8d8c852c7c058fd1fc42a

  • SHA512

    a785912e4df6a37ec71b9de4fb99ed1fcdcbe9cdbf2b45a5593efb9fe75883ae84d51f3e064405da683a8950754f38cf65773d20eb8b65935cda5930c1e73b33

  • SSDEEP

    3072:sKq6EgY6iQrUjyzn8uwPHAU4qWcOGFTAQQASi0fhcZqf7D34teqiOLibBOF:sJqY6i2nwP943GFTABAohcZqf7DIXL

Malware Config

Extracted

Family

redline

Botnet

50502

C2

2.58.56.216:38382

Targets

    • Target

      output.bin

    • Size

      304KB

    • MD5

      09c25a0198eb2d54a9a38d333df61c5c

    • SHA1

      cd3a1e21600d38a5e2bc3504235e71f41b36925e

    • SHA256

      a3134aa354a8411a6156055b2bc877621a5d9edf24a8d8c852c7c058fd1fc42a

    • SHA512

      a785912e4df6a37ec71b9de4fb99ed1fcdcbe9cdbf2b45a5593efb9fe75883ae84d51f3e064405da683a8950754f38cf65773d20eb8b65935cda5930c1e73b33

    • SSDEEP

      3072:sKq6EgY6iQrUjyzn8uwPHAU4qWcOGFTAQQASi0fhcZqf7D34teqiOLibBOF:sJqY6i2nwP943GFTABAohcZqf7DIXL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Enterprise v15

Tasks