General

  • Target

    fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f

  • Size

    128KB

  • Sample

    241110-11kf2swhme

  • MD5

    51d41ac219fdec25739bc553be498753

  • SHA1

    f31959cebe7a2070590542bf2eb7fc09a9dc76e8

  • SHA256

    fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f

  • SHA512

    c7872429234c6c3084796af6f776ef25ce0b66c2461aefa4833e65ebc9df89e9409a85b287df125d12978565fefc1e1ea850f13fda965052291c3ec13e7bf73d

  • SSDEEP

    3072:7cvFBgCYepi2IhzgDkW1LUKxQcnDjDThn4EASNj:7cvOLRW1IKKcTThn4jS

Malware Config

Extracted

Family

redline

Botnet

2508

C2

janolavave.xyz:80

Attributes
  • auth_value

    83b4fac9567e0b85d3ed626fd5a68358

Targets

    • Target

      fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f

    • Size

      128KB

    • MD5

      51d41ac219fdec25739bc553be498753

    • SHA1

      f31959cebe7a2070590542bf2eb7fc09a9dc76e8

    • SHA256

      fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f

    • SHA512

      c7872429234c6c3084796af6f776ef25ce0b66c2461aefa4833e65ebc9df89e9409a85b287df125d12978565fefc1e1ea850f13fda965052291c3ec13e7bf73d

    • SSDEEP

      3072:7cvFBgCYepi2IhzgDkW1LUKxQcnDjDThn4EASNj:7cvOLRW1IKKcTThn4jS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks