General

  • Target

    ae512ff0608b3aa6ceb57255334442c9513ecc03c8acd0bdab938ff449be087c

  • Size

    449KB

  • Sample

    241110-15xbeazkfl

  • MD5

    7f5dd73e62d788270bf301bad441f88b

  • SHA1

    26ef668fb12d95a8b7ecf2aa1da2e816e03c0651

  • SHA256

    ae512ff0608b3aa6ceb57255334442c9513ecc03c8acd0bdab938ff449be087c

  • SHA512

    7e81de4e8e12052ab4f9b611d05162cc6c7ffbcf053776dce23493666e3fb359456ae72100a6ac8f0219e9018565bde29ac7dde47092cdd925e2df237c6dfca5

  • SSDEEP

    12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      ae512ff0608b3aa6ceb57255334442c9513ecc03c8acd0bdab938ff449be087c

    • Size

      449KB

    • MD5

      7f5dd73e62d788270bf301bad441f88b

    • SHA1

      26ef668fb12d95a8b7ecf2aa1da2e816e03c0651

    • SHA256

      ae512ff0608b3aa6ceb57255334442c9513ecc03c8acd0bdab938ff449be087c

    • SHA512

      7e81de4e8e12052ab4f9b611d05162cc6c7ffbcf053776dce23493666e3fb359456ae72100a6ac8f0219e9018565bde29ac7dde47092cdd925e2df237c6dfca5

    • SSDEEP

      12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks