General

  • Target

    204e8268d98a3584e7fda52820025c6b681fd5dca6da726512d3ea97fb4510d5.exe

  • Size

    1.5MB

  • Sample

    240820-qjbsgatdqf

  • MD5

    2a601bbfbfc987186371e75c2d70ef4e

  • SHA1

    791cd6bdac91a6797279413dc2a53770502380ca

  • SHA256

    204e8268d98a3584e7fda52820025c6b681fd5dca6da726512d3ea97fb4510d5

  • SHA512

    1c3c6a4da8448fecaf917ca586ee6e069733c16e3477734b7548863dc81aa9ef9112a648fd38e3ea527766a19a9aac925c3a4d3531784ae9111386721bc79f3e

  • SSDEEP

    24576:4pIaZk3zA3CZfN0rKOWN8O3b0/3GhiwUkWlfBP3:4eSk303UN0rKOWN8O3b0/3GhiwUkWlfZ

Malware Config

Extracted

Family

redline

Botnet

dasad

C2

147.45.47.53:25084

Targets

    • Target

      204e8268d98a3584e7fda52820025c6b681fd5dca6da726512d3ea97fb4510d5.exe

    • Size

      1.5MB

    • MD5

      2a601bbfbfc987186371e75c2d70ef4e

    • SHA1

      791cd6bdac91a6797279413dc2a53770502380ca

    • SHA256

      204e8268d98a3584e7fda52820025c6b681fd5dca6da726512d3ea97fb4510d5

    • SHA512

      1c3c6a4da8448fecaf917ca586ee6e069733c16e3477734b7548863dc81aa9ef9112a648fd38e3ea527766a19a9aac925c3a4d3531784ae9111386721bc79f3e

    • SSDEEP

      24576:4pIaZk3zA3CZfN0rKOWN8O3b0/3GhiwUkWlfBP3:4eSk303UN0rKOWN8O3b0/3GhiwUkWlfZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks