General

  • Target

    24654d8e3a2f4d53fbb0e25acfbccae2226db6cf16573898909ece34cc2c9071N

  • Size

    175KB

  • Sample

    241110-1w5anavrht

  • MD5

    263df1479b9cfec2cfebdc4ca88fb100

  • SHA1

    e0ac24b3dd5ae5253bb6d261714006667ca85dfb

  • SHA256

    24654d8e3a2f4d53fbb0e25acfbccae2226db6cf16573898909ece34cc2c9071

  • SHA512

    27a9295690acd30a649396c4cf045b9cab1dd616268a1aff654d2baf28b67cb0112daffbc3a80b71d26da3c65305ee77dba03d604c8293b909730de970cc94b5

  • SSDEEP

    3072:XxqZW11a2kX8fxVSkXw4FeYs9Oh0rxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0j+:hqZkxVS+DSOh

Malware Config

Extracted

Family

redline

Botnet

durov

C2

193.56.146.11:4162

Attributes
  • auth_value

    337984645d237df105d30aab7013119f

Targets

    • Target

      24654d8e3a2f4d53fbb0e25acfbccae2226db6cf16573898909ece34cc2c9071N

    • Size

      175KB

    • MD5

      263df1479b9cfec2cfebdc4ca88fb100

    • SHA1

      e0ac24b3dd5ae5253bb6d261714006667ca85dfb

    • SHA256

      24654d8e3a2f4d53fbb0e25acfbccae2226db6cf16573898909ece34cc2c9071

    • SHA512

      27a9295690acd30a649396c4cf045b9cab1dd616268a1aff654d2baf28b67cb0112daffbc3a80b71d26da3c65305ee77dba03d604c8293b909730de970cc94b5

    • SSDEEP

      3072:XxqZW11a2kX8fxVSkXw4FeYs9Oh0rxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0j+:hqZkxVS+DSOh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks