General

  • Target

    b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc

  • Size

    1.1MB

  • Sample

    241108-m5ngls1eqm

  • MD5

    2f52337c3546433b9a391e704b652f49

  • SHA1

    e4c818132b5e30c79406e1f38c8fe267f6267aef

  • SHA256

    b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc

  • SHA512

    9a6ae4897686bfc0988b3856e7904943a6653264a2df4fd4afe910250eaa115c6464c762ef635f3d189bfdb1ae78789965e8a652620f2dfd23d8da37d14bd183

  • SSDEEP

    24576:JyLq9Yqv0TazkmqNqLXq9yRn1xtlUf6BRH7b+cfXX:8LWR0eAmq0+9yF1xtlUCBRH7b+cfX

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc

    • Size

      1.1MB

    • MD5

      2f52337c3546433b9a391e704b652f49

    • SHA1

      e4c818132b5e30c79406e1f38c8fe267f6267aef

    • SHA256

      b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc

    • SHA512

      9a6ae4897686bfc0988b3856e7904943a6653264a2df4fd4afe910250eaa115c6464c762ef635f3d189bfdb1ae78789965e8a652620f2dfd23d8da37d14bd183

    • SSDEEP

      24576:JyLq9Yqv0TazkmqNqLXq9yRn1xtlUf6BRH7b+cfXX:8LWR0eAmq0+9yF1xtlUCBRH7b+cfX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks