General

  • Target

    62a9881e196fc003909776f21d67cf42eb4b9308fdf4e6a5cb1aa9600f981316

  • Size

    407KB

  • Sample

    241110-132hcawkcw

  • MD5

    0819e955d76c9a24d60232ddb5078a90

  • SHA1

    ddf86ef9d575b5ede48c0fec2b651c62626aaade

  • SHA256

    62a9881e196fc003909776f21d67cf42eb4b9308fdf4e6a5cb1aa9600f981316

  • SHA512

    4594ff10a92c3608950e92caea53a437c6297cbc6b4054b9bf01dab4ff8ad723b2021edccb82907ad4630697e5dab1a398608e75da4059f1431d53384130cba7

  • SSDEEP

    12288:9EviK64KoYNu/FtIvxWXTtGMvDfGMx9IPN8:L4KoyM8WXTtGgDfGy9IP

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      62a9881e196fc003909776f21d67cf42eb4b9308fdf4e6a5cb1aa9600f981316

    • Size

      407KB

    • MD5

      0819e955d76c9a24d60232ddb5078a90

    • SHA1

      ddf86ef9d575b5ede48c0fec2b651c62626aaade

    • SHA256

      62a9881e196fc003909776f21d67cf42eb4b9308fdf4e6a5cb1aa9600f981316

    • SHA512

      4594ff10a92c3608950e92caea53a437c6297cbc6b4054b9bf01dab4ff8ad723b2021edccb82907ad4630697e5dab1a398608e75da4059f1431d53384130cba7

    • SSDEEP

      12288:9EviK64KoYNu/FtIvxWXTtGMvDfGMx9IPN8:L4KoyM8WXTtGgDfGy9IP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks