General

  • Target

    40387b38e43e095aedfd5598de9ae41bc6aa33659d3e96edd3fea17f6f9a45b6

  • Size

    175KB

  • Sample

    241110-1rxd9awckl

  • MD5

    116cf8ffc3020d2bf9755ed4448ddd8c

  • SHA1

    c7f0921b039c136fa6bb4586920a7e07beafd2f4

  • SHA256

    40387b38e43e095aedfd5598de9ae41bc6aa33659d3e96edd3fea17f6f9a45b6

  • SHA512

    cfe5fa104d424f7d1afd9d4740b2ac0289a4ee3687f6c8b894e1c95f5dff71e34e63f65fcbc2ba69830b51ca0a480236a1771cc6ea1c9a12cf02e3ab978d88fd

  • SSDEEP

    3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuz:CqZk516LTTh

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

193.233.20.32:4125

Attributes
  • auth_value

    1b692976ca991040f2e8890409c35142

Targets

    • Target

      40387b38e43e095aedfd5598de9ae41bc6aa33659d3e96edd3fea17f6f9a45b6

    • Size

      175KB

    • MD5

      116cf8ffc3020d2bf9755ed4448ddd8c

    • SHA1

      c7f0921b039c136fa6bb4586920a7e07beafd2f4

    • SHA256

      40387b38e43e095aedfd5598de9ae41bc6aa33659d3e96edd3fea17f6f9a45b6

    • SHA512

      cfe5fa104d424f7d1afd9d4740b2ac0289a4ee3687f6c8b894e1c95f5dff71e34e63f65fcbc2ba69830b51ca0a480236a1771cc6ea1c9a12cf02e3ab978d88fd

    • SSDEEP

      3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuz:CqZk516LTTh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks