General

  • Target

    641075714299b5050da22b4803d1a37b838b913e90d02a7ae90728660cb34585

  • Size

    479KB

  • Sample

    241109-jsmg1a1bmr

  • MD5

    b53d960a07e96c62e32d9fe22b04b218

  • SHA1

    93f1c9df82556b3f266d8e57cbbe749ac2f5d5e5

  • SHA256

    641075714299b5050da22b4803d1a37b838b913e90d02a7ae90728660cb34585

  • SHA512

    0888bc118deb2cd7ed9afc9f21be22f288217e840c35357dfa90c1cb97c922b050525988dc1b14f11247b1222a83a9cb81a248606697eb98dd974e314a441cd2

  • SSDEEP

    12288:qMrQy90uNTrDQMtuOsIYhHlLjUgtGIcbUcV:uyV3cMtufLGIcxV

Malware Config

Extracted

Family

redline

Botnet

dumud

C2

217.196.96.101:4132

Attributes
  • auth_value

    3e18d4b90418aa3e78d8822e87c62f5c

Targets

    • Target

      641075714299b5050da22b4803d1a37b838b913e90d02a7ae90728660cb34585

    • Size

      479KB

    • MD5

      b53d960a07e96c62e32d9fe22b04b218

    • SHA1

      93f1c9df82556b3f266d8e57cbbe749ac2f5d5e5

    • SHA256

      641075714299b5050da22b4803d1a37b838b913e90d02a7ae90728660cb34585

    • SHA512

      0888bc118deb2cd7ed9afc9f21be22f288217e840c35357dfa90c1cb97c922b050525988dc1b14f11247b1222a83a9cb81a248606697eb98dd974e314a441cd2

    • SSDEEP

      12288:qMrQy90uNTrDQMtuOsIYhHlLjUgtGIcbUcV:uyV3cMtufLGIcxV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks