General

  • Target

    399e844bc038a0c7fcb1cc99a30e34e30c779f71ee62a6139634535e0803a88d

  • Size

    170KB

  • Sample

    241110-1e7z8aynej

  • MD5

    68e54d4397b24f4bb5de3670b15dc1f0

  • SHA1

    b617439e29c0d2b0457e111886119e3c2199f100

  • SHA256

    399e844bc038a0c7fcb1cc99a30e34e30c779f71ee62a6139634535e0803a88d

  • SHA512

    33ddf2d3ec31279571bd8db6a980b06bf211144e9e042930cab6e2d2aa4998e34c3c584aac05acc3ebeb1d63625017850c47e51b25749ba4ffb9bd2a63fb9051

  • SSDEEP

    1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      399e844bc038a0c7fcb1cc99a30e34e30c779f71ee62a6139634535e0803a88d

    • Size

      170KB

    • MD5

      68e54d4397b24f4bb5de3670b15dc1f0

    • SHA1

      b617439e29c0d2b0457e111886119e3c2199f100

    • SHA256

      399e844bc038a0c7fcb1cc99a30e34e30c779f71ee62a6139634535e0803a88d

    • SHA512

      33ddf2d3ec31279571bd8db6a980b06bf211144e9e042930cab6e2d2aa4998e34c3c584aac05acc3ebeb1d63625017850c47e51b25749ba4ffb9bd2a63fb9051

    • SSDEEP

      1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks