General

  • Target

    9a34d520aee4250c9b819c7ce0725bb3

  • Size

    373KB

  • Sample

    241109-3a6byavara

  • MD5

    9a34d520aee4250c9b819c7ce0725bb3

  • SHA1

    602428d616447b628a6dbef548bb4b2c695ead94

  • SHA256

    e6e254dc4031816d0e231aa71bd05feba6d80701460ec7f1974613115267841e

  • SHA512

    cd67819ee57c528b90b44258a94818490647db509340cf04b81dc7559f0dfd181a5945286e4e807402c48e0829bba45d8aa9a39eaf14d18f218950991ed2a65a

  • SSDEEP

    6144:6EgPS+2K5Y0dvG4djhrnpV3yw+dNHpLQOIf+STXg:6EgPS+2ivz3Lix1P6

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      9a34d520aee4250c9b819c7ce0725bb3

    • Size

      373KB

    • MD5

      9a34d520aee4250c9b819c7ce0725bb3

    • SHA1

      602428d616447b628a6dbef548bb4b2c695ead94

    • SHA256

      e6e254dc4031816d0e231aa71bd05feba6d80701460ec7f1974613115267841e

    • SHA512

      cd67819ee57c528b90b44258a94818490647db509340cf04b81dc7559f0dfd181a5945286e4e807402c48e0829bba45d8aa9a39eaf14d18f218950991ed2a65a

    • SSDEEP

      6144:6EgPS+2K5Y0dvG4djhrnpV3yw+dNHpLQOIf+STXg:6EgPS+2ivz3Lix1P6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks