General

  • Target

    70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe

  • Size

    295KB

  • Sample

    241110-1vvd3ayrcj

  • MD5

    b12ab92f9082ee385f9c97ea323024bb

  • SHA1

    8e836b6c36fe75533a68795a5cf5fe47a6cf4c99

  • SHA256

    70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e

  • SHA512

    98b9a379ca4e24286f8ba90868b1d1724f0de7c7e7f2c2a10c134d4dd189268f2b4d6b1e24245bf768527c161dc37979d6ed0e74c0b17e244262e82ab966d2a0

  • SSDEEP

    6144:YqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08nW:FhUt5cQrw+GhCIJ0ft/juI8W

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe

    • Size

      295KB

    • MD5

      b12ab92f9082ee385f9c97ea323024bb

    • SHA1

      8e836b6c36fe75533a68795a5cf5fe47a6cf4c99

    • SHA256

      70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e

    • SHA512

      98b9a379ca4e24286f8ba90868b1d1724f0de7c7e7f2c2a10c134d4dd189268f2b4d6b1e24245bf768527c161dc37979d6ed0e74c0b17e244262e82ab966d2a0

    • SSDEEP

      6144:YqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08nW:FhUt5cQrw+GhCIJ0ft/juI8W

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks