General

  • Target

    5e2f59ef0e7426d0f7bb52b299e1f644115bf3cf48db8d4e662ae35fad143378

  • Size

    282KB

  • Sample

    241109-mdfmpa1ret

  • MD5

    b8a870f608592eb378c945a659883c75

  • SHA1

    5082424c33d763cfaafde8890ff37b0928b59239

  • SHA256

    5e2f59ef0e7426d0f7bb52b299e1f644115bf3cf48db8d4e662ae35fad143378

  • SHA512

    3692356f229caccc6bc337f31f18cd37ab14a9d50ff8e8dc98cca9c1d60f1c21049d070da0e32beec00c17dc64dec63bc050cf3d22eea63dff0a1b4f47de2b33

  • SSDEEP

    6144:NPhyKHEHzWWg6jtC+usEHoVMdPodPGhUvoOVAk/o:BhyhU6j1RGv1vhUxo

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7

    • Size

      381KB

    • MD5

      9ab3ed9b7bc742444a15c21c8b105276

    • SHA1

      3072cc9c9e6a34a5bf092343a58e99cda6129430

    • SHA256

      609ea9411bdd28e26190355fba41dfdc48b6732c48a591e19e920f64850948e7

    • SHA512

      983731a35b8ef86f0299c665b30687f115547f6922b0b06d5731585edcd5eda597035f5b81a32c056b41da70097d0b65d3214e985008ea285f632b3898294c18

    • SSDEEP

      6144:MMpMtC+usuHoVMdPolPe3VeQjDpgpRjFE:MMpM1R8v1/3V1DSL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks