General

  • Target

    278e494567f8e9bf557b2321629a867b6562e9771d70df5ac0139e8a1e70defe.exe

  • Size

    175KB

  • Sample

    241110-1a1eksvnav

  • MD5

    1132b99d2ccaab6591647b904f34680c

  • SHA1

    85e84620a6e04dc2fc0db5b23c03ab848f3922b8

  • SHA256

    278e494567f8e9bf557b2321629a867b6562e9771d70df5ac0139e8a1e70defe

  • SHA512

    9cf19de714c88462291db3e4ae1c631115439bccf58d2937105c218da17a4e6061563f22c4207ab2fb58c0e133e4af7b673292939c178b0c7a5c3c7471b7a11e

  • SSDEEP

    3072:RxqZWDdxafU74XRVuNsceB/FrhavxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOU:DqZcIRVuWHrhD

Malware Config

Extracted

Family

redline

Botnet

fchan

C2

pepunn.com:4162

Attributes
  • auth_value

    127bd53d55e8c4f0dd2f6e1ea60deef4

Targets

    • Target

      278e494567f8e9bf557b2321629a867b6562e9771d70df5ac0139e8a1e70defe.exe

    • Size

      175KB

    • MD5

      1132b99d2ccaab6591647b904f34680c

    • SHA1

      85e84620a6e04dc2fc0db5b23c03ab848f3922b8

    • SHA256

      278e494567f8e9bf557b2321629a867b6562e9771d70df5ac0139e8a1e70defe

    • SHA512

      9cf19de714c88462291db3e4ae1c631115439bccf58d2937105c218da17a4e6061563f22c4207ab2fb58c0e133e4af7b673292939c178b0c7a5c3c7471b7a11e

    • SSDEEP

      3072:RxqZWDdxafU74XRVuNsceB/FrhavxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOU:DqZcIRVuWHrhD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks