General

  • Target

    050f1ebdd482837826bac10f17df93fa572f913c

  • Size

    325KB

  • Sample

    241110-176mvswfpq

  • MD5

    8b636af69f3b66e637ae90716d25ced4

  • SHA1

    050f1ebdd482837826bac10f17df93fa572f913c

  • SHA256

    ef676ec8d34485c62d1fa1b1c92e7b15139a11b0a768faed82528da43f36ee42

  • SHA512

    30e36dacebd9bd0da3afdfd025669affc2d10e053401d8b5104e90daebad2fe74000efa9f080e29cd86523a53e2453b8d3ed22de29975e78875bdee3f16e6d27

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      050f1ebdd482837826bac10f17df93fa572f913c

    • Size

      325KB

    • MD5

      8b636af69f3b66e637ae90716d25ced4

    • SHA1

      050f1ebdd482837826bac10f17df93fa572f913c

    • SHA256

      ef676ec8d34485c62d1fa1b1c92e7b15139a11b0a768faed82528da43f36ee42

    • SHA512

      30e36dacebd9bd0da3afdfd025669affc2d10e053401d8b5104e90daebad2fe74000efa9f080e29cd86523a53e2453b8d3ed22de29975e78875bdee3f16e6d27

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks