General

  • Target

    d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2

  • Size

    362KB

  • Sample

    241110-1wcweayrdj

  • MD5

    b51e8d9551b5ad2a7399146b23470db6

  • SHA1

    d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2

  • SHA256

    bd58abfe0c844ca630156a8d6fc13931776e1352be365d7840c1358f40800a01

  • SHA512

    18cb3bdfd043dcbbf707046f4deeb40128252c1d12bc8c31154d869cac8c964a6c46b4cfa4bf9060edf0642fca589703822cbd2b7f0716407c70fcc9960cf3a8

  • SSDEEP

    6144:eTMH0FM6Mb008Jsp9z1Mw+/48QKTUZrZPTHsACne/kzwLZ:B0FM6MY08Jsp9zWO8QKurZP38k

Malware Config

Extracted

Family

redline

Botnet

RuzkiUNIKALNO

C2

193.233.48.58:38989

Attributes
  • auth_value

    c504b04cfbdd4bf85ce6195bcb37fba6

Targets

    • Target

      d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2

    • Size

      362KB

    • MD5

      b51e8d9551b5ad2a7399146b23470db6

    • SHA1

      d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2

    • SHA256

      bd58abfe0c844ca630156a8d6fc13931776e1352be365d7840c1358f40800a01

    • SHA512

      18cb3bdfd043dcbbf707046f4deeb40128252c1d12bc8c31154d869cac8c964a6c46b4cfa4bf9060edf0642fca589703822cbd2b7f0716407c70fcc9960cf3a8

    • SSDEEP

      6144:eTMH0FM6Mb008Jsp9z1Mw+/48QKTUZrZPTHsACne/kzwLZ:B0FM6MY08Jsp9zWO8QKurZP38k

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks