General

  • Target

    3e455f09e1f5ae68db704e6c1f6f4cbed721a282466c341ff608d4581e972495

  • Size

    353KB

  • Sample

    241110-1lzmesvpfz

  • MD5

    4e38dba749f8d7f6932efe7bbe39159a

  • SHA1

    3d9a3f0f2faee76c1d2cb1909af1cc8252c01bf3

  • SHA256

    3e455f09e1f5ae68db704e6c1f6f4cbed721a282466c341ff608d4581e972495

  • SHA512

    3681bc6a34e548874bac1cb6fa1042023742b456701d2ed24028971b691274dc319df8ac8f4a6e801cf2576b8454e1b6fbdc2f6556a0019815e4d98dffc519dd

  • SSDEEP

    6144:hHSNO/qiFSVZYZkRFi0s570WDyscbeaOKweNIwPg:hyNgqiFklRWUeaOK1Ow4

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      3e455f09e1f5ae68db704e6c1f6f4cbed721a282466c341ff608d4581e972495

    • Size

      353KB

    • MD5

      4e38dba749f8d7f6932efe7bbe39159a

    • SHA1

      3d9a3f0f2faee76c1d2cb1909af1cc8252c01bf3

    • SHA256

      3e455f09e1f5ae68db704e6c1f6f4cbed721a282466c341ff608d4581e972495

    • SHA512

      3681bc6a34e548874bac1cb6fa1042023742b456701d2ed24028971b691274dc319df8ac8f4a6e801cf2576b8454e1b6fbdc2f6556a0019815e4d98dffc519dd

    • SSDEEP

      6144:hHSNO/qiFSVZYZkRFi0s570WDyscbeaOKweNIwPg:hyNgqiFklRWUeaOK1Ow4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks