General

  • Target

    c1f0e4d2b4fa1bd624feac03130f2ccacbecd4dbb37b10dc9f4b24906788d469

  • Size

    469KB

  • Sample

    241109-17rhyasnfx

  • MD5

    b64f18258c20c575e1b0825072a483a9

  • SHA1

    0b3c8b98936f84742bc96fee429c7580fa378020

  • SHA256

    c1f0e4d2b4fa1bd624feac03130f2ccacbecd4dbb37b10dc9f4b24906788d469

  • SHA512

    b493d6c09348c3bee07cb7fca16351f918b45bfbd319dc8fcfd334e9076d43c45d975e3ecc4466ffeeb702bde621b7b4fb4b0f25eaf532def9b2315d3c193fd7

  • SSDEEP

    6144:z+tQ+FAAUGao6KF757xJuR6r22qX40H17MzwofFdKgLloPTxBzfnmUIHztZlDj/k:St6bGD6AN7x8cqX4G18ZhgvfYHzlP

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:20819

Attributes
  • auth_value

    ee92d883673b7156fdd66cac5fc8d2d0

Targets

    • Target

      c1f0e4d2b4fa1bd624feac03130f2ccacbecd4dbb37b10dc9f4b24906788d469

    • Size

      469KB

    • MD5

      b64f18258c20c575e1b0825072a483a9

    • SHA1

      0b3c8b98936f84742bc96fee429c7580fa378020

    • SHA256

      c1f0e4d2b4fa1bd624feac03130f2ccacbecd4dbb37b10dc9f4b24906788d469

    • SHA512

      b493d6c09348c3bee07cb7fca16351f918b45bfbd319dc8fcfd334e9076d43c45d975e3ecc4466ffeeb702bde621b7b4fb4b0f25eaf532def9b2315d3c193fd7

    • SSDEEP

      6144:z+tQ+FAAUGao6KF757xJuR6r22qX40H17MzwofFdKgLloPTxBzfnmUIHztZlDj/k:St6bGD6AN7x8cqX4G18ZhgvfYHzlP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks