General

  • Target

    df652ccdc8b9523efe3b081fcafc38d63078feb338c033f732dfe58d85c82b31

  • Size

    243KB

  • Sample

    241110-1v2hdawcrn

  • MD5

    26dece74222fd60cd4c0bffeccffb886

  • SHA1

    68881c6f6d5f54d4b98466c6eb0a527a6deed7b2

  • SHA256

    df652ccdc8b9523efe3b081fcafc38d63078feb338c033f732dfe58d85c82b31

  • SHA512

    4c1c0eb78461d9b0a0d5a74db283d78c21e3aa8d7276d6dc36f9f5b6a6b449cd723ed7cfdec8dd2f78e5dadac71875e767dd49bcf32fb720a3c9b08bfc541ed1

  • SSDEEP

    6144:FmuGZ8kUr0pq/bnzhN1Vb81I39ax5MkAQ4tbQMsyZ:QuGiDKObzj11829AOhQ4tbOG

Malware Config

Extracted

Family

redline

Botnet

271@2023

C2

77.73.133.62:22344

Attributes
  • auth_value

    1ee05d97bb1f23e9ac01ec6d1a5f1ffb

Targets

    • Target

      7f874dbe9430e9e578b7e328e9b114cb105b3d1b427b4d4d69a237a225394937.exe

    • Size

      391KB

    • MD5

      961abdac586b1e8cdcef79c9ca39a901

    • SHA1

      468abf20e2108f2e4e05e824b5ab29bb7b993bdf

    • SHA256

      7f874dbe9430e9e578b7e328e9b114cb105b3d1b427b4d4d69a237a225394937

    • SHA512

      4816531da0507f2c1e1d5955f4592044a985a6ca2e1333d25976f27d2da27afafca0426572c7928224e8bed8e588590dc180e148b882eab8143847fbcf0f173a

    • SSDEEP

      6144:cbD6GU3LL/fFMjvBv+kHc36dZEOiErdkbVwD3mOHM2g7F7:cbD6GEPfFMjvNt836zrdkbsBjg7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks