General

  • Target

    4d5723ea5d9fa3f1f38c2a0cc4df85e7

  • Size

    325KB

  • Sample

    241110-1hxnnawdmh

  • MD5

    4d5723ea5d9fa3f1f38c2a0cc4df85e7

  • SHA1

    884616e10a8029288d54805722d2c122a50a8d21

  • SHA256

    173bb95c54639971bf8601af360ae865c4d3d3e4335cef5bf0d00892b68bb4f3

  • SHA512

    1d5c79c23015d69b76e2e7ef78a15ba23c9715f666591453e1cc0f430fc984b7f7edbf9f73c4a2de35d3fb3a1b658959f731601204c5adfd7a780b23acd8117d

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      4d5723ea5d9fa3f1f38c2a0cc4df85e7

    • Size

      325KB

    • MD5

      4d5723ea5d9fa3f1f38c2a0cc4df85e7

    • SHA1

      884616e10a8029288d54805722d2c122a50a8d21

    • SHA256

      173bb95c54639971bf8601af360ae865c4d3d3e4335cef5bf0d00892b68bb4f3

    • SHA512

      1d5c79c23015d69b76e2e7ef78a15ba23c9715f666591453e1cc0f430fc984b7f7edbf9f73c4a2de35d3fb3a1b658959f731601204c5adfd7a780b23acd8117d

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks