General

  • Target

    11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9

  • Size

    1.1MB

  • Sample

    241107-jgtryayekj

  • MD5

    56ef3ad7e2f5d400c057efefab02ef39

  • SHA1

    8d97f2aaa01c447e088b6ba34beef8defd6e79ad

  • SHA256

    11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9

  • SHA512

    239c688ecb9bb8adf5844e9348bccfc735772e9531647047f49f2c23e65a583777789e8ac5ac7ceda54540f35b3573735cb8cdc7a2712738f626764a75ef2d26

  • SSDEEP

    24576:byzzkEILlL0Tsm6BlV86jxDOIgOdJK4H5:OzzkEM0rKlV/1VTbK4H

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9

    • Size

      1.1MB

    • MD5

      56ef3ad7e2f5d400c057efefab02ef39

    • SHA1

      8d97f2aaa01c447e088b6ba34beef8defd6e79ad

    • SHA256

      11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9

    • SHA512

      239c688ecb9bb8adf5844e9348bccfc735772e9531647047f49f2c23e65a583777789e8ac5ac7ceda54540f35b3573735cb8cdc7a2712738f626764a75ef2d26

    • SSDEEP

      24576:byzzkEILlL0Tsm6BlV86jxDOIgOdJK4H5:OzzkEM0rKlV/1VTbK4H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks