General

  • Target

    bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a

  • Size

    1.1MB

  • Sample

    241106-tddxestdlr

  • MD5

    997984708b1249a1dc148eac0980263e

  • SHA1

    ace521984a3abce7eade1e7c7df9cbea79f5f1d0

  • SHA256

    bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a

  • SHA512

    431b0ce96b10b1a2a5aae39b6bea8f106908120b728e50763a5bf633a3bfcca899a0b94c9ea1a9d15e274ccb94034ecbc8cb67207faf85b155605dcdd7de9960

  • SSDEEP

    24576:hy6OmA76F0rYSuj1Gwr/lJDVhn1sUEuLgAmc54U4E/A:U6Om420cAAlJDVhnVj+UL

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a

    • Size

      1.1MB

    • MD5

      997984708b1249a1dc148eac0980263e

    • SHA1

      ace521984a3abce7eade1e7c7df9cbea79f5f1d0

    • SHA256

      bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a

    • SHA512

      431b0ce96b10b1a2a5aae39b6bea8f106908120b728e50763a5bf633a3bfcca899a0b94c9ea1a9d15e274ccb94034ecbc8cb67207faf85b155605dcdd7de9960

    • SSDEEP

      24576:hy6OmA76F0rYSuj1Gwr/lJDVhn1sUEuLgAmc54U4E/A:U6Om420cAAlJDVhnVj+UL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks