General

  • Target

    d7226d4ee5af6aa1f31ad8a097b13bfb

  • Size

    449KB

  • Sample

    241109-ym9gxa1dkh

  • MD5

    d7226d4ee5af6aa1f31ad8a097b13bfb

  • SHA1

    ec9ba847169d82093a686edfdf38891d10316f43

  • SHA256

    19fd3b891aded33550fb126977c786f5889829a0926c2f11d14ab0a46e92d02e

  • SHA512

    3d5bb2815e6c2c2df1470479831a2867385b7ef244e3a48a2e0ad488a7205dc5f92de0a53554c02aa19d9d3d4e8fd434852b0332f9520b330024eda93ae4b08f

  • SSDEEP

    12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      d7226d4ee5af6aa1f31ad8a097b13bfb

    • Size

      449KB

    • MD5

      d7226d4ee5af6aa1f31ad8a097b13bfb

    • SHA1

      ec9ba847169d82093a686edfdf38891d10316f43

    • SHA256

      19fd3b891aded33550fb126977c786f5889829a0926c2f11d14ab0a46e92d02e

    • SHA512

      3d5bb2815e6c2c2df1470479831a2867385b7ef244e3a48a2e0ad488a7205dc5f92de0a53554c02aa19d9d3d4e8fd434852b0332f9520b330024eda93ae4b08f

    • SSDEEP

      12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks