General

  • Target

    912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

  • Size

    240KB

  • Sample

    241110-1v6r4avrft

  • MD5

    1dbec8858158a7b4ccfc3c3779b9c2f9

  • SHA1

    7292efa7a0bf6cc3e0dea6b26ac054ae8b7b1b1c

  • SHA256

    912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

  • SHA512

    4dcebecd0317a9549ee9493c8a9338a70844c4d8575575806534a6487aa2e3f1f370c83608d059fc263db0ad1c7ce1836f25fdb47d16c0bf5fc9b06887ad0154

  • SSDEEP

    3072:WBjqhLteCXuiRYInt782Hp8tTH7Cbub/kQ4aFidLqboe/nHP9pChAAOr/M0RNTem:ijq1XuYnvubGXQDdjP/Chs/M/

Malware Config

Extracted

Family

redline

Botnet

ghost

C2

104.37.174.31:27620

Attributes
  • auth_value

    1d44e9a3b9adc75d1064fce70c099dc7

Targets

    • Target

      912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

    • Size

      240KB

    • MD5

      1dbec8858158a7b4ccfc3c3779b9c2f9

    • SHA1

      7292efa7a0bf6cc3e0dea6b26ac054ae8b7b1b1c

    • SHA256

      912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

    • SHA512

      4dcebecd0317a9549ee9493c8a9338a70844c4d8575575806534a6487aa2e3f1f370c83608d059fc263db0ad1c7ce1836f25fdb47d16c0bf5fc9b06887ad0154

    • SSDEEP

      3072:WBjqhLteCXuiRYInt782Hp8tTH7Cbub/kQ4aFidLqboe/nHP9pChAAOr/M0RNTem:ijq1XuYnvubGXQDdjP/Chs/M/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks