General

  • Target

    3fb84e47543a2a02c2ef83f197d0b2eb5dde8f689fd09a68d1443dfa3c3cda97

  • Size

    279KB

  • Sample

    241109-16ta5stdnj

  • MD5

    1a898a06e0672db57cd1c9c56977e68e

  • SHA1

    30df29fea1e96b544192d8c779623bc4d27481e0

  • SHA256

    3fb84e47543a2a02c2ef83f197d0b2eb5dde8f689fd09a68d1443dfa3c3cda97

  • SHA512

    935ae0c1b7168bf455984d8201b5c04ed57d4132aa0681e9a984b9078265637137933eb96d304b4fd53e72f40101bae448fba2b04e44759c683bd245b48fe955

  • SSDEEP

    6144:QKS3fPwJSYOkLP+JzQUmjJ6KnGPEY4nOcvgkLwViYNqo26i:PS3fPwpxLP+JQFzDOcTLhYNI

Malware Config

Extracted

Family

redline

Botnet

neruzki

C2

193.106.191.22:47242

Attributes
  • auth_value

    be14ae67c6dd227f622680a27ea42452

Targets

    • Target

      912be7e225580adf42e7c05087105318fb1b2e82664483258ddd7ae4d86c29fd

    • Size

      340KB

    • MD5

      2f55f5a22ee20d234bbf3065c98fcf55

    • SHA1

      fd5e7704a843bb9daa185d5f0e41857df77c0c6d

    • SHA256

      912be7e225580adf42e7c05087105318fb1b2e82664483258ddd7ae4d86c29fd

    • SHA512

      ebd094b3e01b0202f7ba469f57acd7b4b3d556fe72b725db9dc7b8d04cb11a5cfcae639cf46be75772246c1a309fde88d6d492d13872c7a22e802f74589361ed

    • SSDEEP

      6144:XCejELQUit72u5QUmjJyKnGPEw4nO4v0kLwViYNgo2yv:X7EEUi5DQFP3O4PLhYN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks