General

  • Target

    bbe46ea7807d86db7e161af8a97cbd9b

  • Size

    376KB

  • Sample

    241110-12ay1awjhw

  • MD5

    bbe46ea7807d86db7e161af8a97cbd9b

  • SHA1

    7493e849d34838eb9f235fceebb3d69d478804eb

  • SHA256

    3b67a2b254160c64a1ef85d41131c4e440b93ecbc39156322cd8467142798ed6

  • SHA512

    0e2a9e82b9ad4b1f1bd8e106a292814b08f2c893a6258cbfc9e6889f1367b74680d64e125cbff4708d86594ca0c91fdc957bd6a20a1f67561807edfc3ac20b09

  • SSDEEP

    6144:fmR9eLJHsEU0tY9lTlvSUaUhFrTaJSxJTtjg4B:fmR9eFHsbvS7QCJ6Z

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      bbe46ea7807d86db7e161af8a97cbd9b

    • Size

      376KB

    • MD5

      bbe46ea7807d86db7e161af8a97cbd9b

    • SHA1

      7493e849d34838eb9f235fceebb3d69d478804eb

    • SHA256

      3b67a2b254160c64a1ef85d41131c4e440b93ecbc39156322cd8467142798ed6

    • SHA512

      0e2a9e82b9ad4b1f1bd8e106a292814b08f2c893a6258cbfc9e6889f1367b74680d64e125cbff4708d86594ca0c91fdc957bd6a20a1f67561807edfc3ac20b09

    • SSDEEP

      6144:fmR9eLJHsEU0tY9lTlvSUaUhFrTaJSxJTtjg4B:fmR9eFHsbvS7QCJ6Z

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks