General

  • Target

    8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996

  • Size

    272KB

  • Sample

    241109-1gzrmasgqa

  • MD5

    18a6829ecaa02bcba1acd9b829240e48

  • SHA1

    a17ed48de9ed9048370e16f8c486ac8847d01db8

  • SHA256

    8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996

  • SHA512

    6dc3b2281a9f391e3b9b9a0f38aee4c908968ec57ff5e820e6b24ed4dce02d2178c6dbe059cb29e8cf81adb5fbae3057f19db696d3a538a90b168d5735bd8a16

  • SSDEEP

    3072:ow6jYELp6VFxC2lS2H0onEyGKH5miQo40s0CGzhF3lnI2gfxNn2pU9f2MKTV/wiv:ow6j+l8whnTGKZm4HzhrnI

Malware Config

Extracted

Family

redline

Botnet

ronur

C2

193.233.20.20:4134

Attributes
  • auth_value

    f88f86755a528d4b25f6f3628c460965

Targets

    • Target

      8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996

    • Size

      272KB

    • MD5

      18a6829ecaa02bcba1acd9b829240e48

    • SHA1

      a17ed48de9ed9048370e16f8c486ac8847d01db8

    • SHA256

      8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996

    • SHA512

      6dc3b2281a9f391e3b9b9a0f38aee4c908968ec57ff5e820e6b24ed4dce02d2178c6dbe059cb29e8cf81adb5fbae3057f19db696d3a538a90b168d5735bd8a16

    • SSDEEP

      3072:ow6jYELp6VFxC2lS2H0onEyGKH5miQo40s0CGzhF3lnI2gfxNn2pU9f2MKTV/wiv:ow6j+l8whnTGKZm4HzhrnI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks