General

  • Target

    0d1a20c8e11356c36311dd4cdf47e546ed85fe62

  • Size

    449KB

  • Sample

    241110-1573xawkgs

  • MD5

    e26527d9da43176f27f8d3f52e0052d8

  • SHA1

    0d1a20c8e11356c36311dd4cdf47e546ed85fe62

  • SHA256

    073c76f54b83aea6de3be5c6cb1bf40a6c7bf4caddd37c6755c2719daf5fd399

  • SHA512

    001e0b657eb9b17d7983f3c181f62f7eb15ab2f6ee8e670e4c8fcfcc9a3d0ebb12af004412a7d5f5ad8d315b9612c8dbb7939b4a3f9f38006e68508a20a2a81a

  • SSDEEP

    12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      0d1a20c8e11356c36311dd4cdf47e546ed85fe62

    • Size

      449KB

    • MD5

      e26527d9da43176f27f8d3f52e0052d8

    • SHA1

      0d1a20c8e11356c36311dd4cdf47e546ed85fe62

    • SHA256

      073c76f54b83aea6de3be5c6cb1bf40a6c7bf4caddd37c6755c2719daf5fd399

    • SHA512

      001e0b657eb9b17d7983f3c181f62f7eb15ab2f6ee8e670e4c8fcfcc9a3d0ebb12af004412a7d5f5ad8d315b9612c8dbb7939b4a3f9f38006e68508a20a2a81a

    • SSDEEP

      12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks