General

  • Target

    a076d621806451036285a601257723eb

  • Size

    372KB

  • Sample

    241110-1yqkaawdpj

  • MD5

    a076d621806451036285a601257723eb

  • SHA1

    bc3639959cf596199c412228c09fbcef79000533

  • SHA256

    67cae5ec23b17438274367b5ebdd078890805cd35b5c98089b7c2df8be080cb8

  • SHA512

    cfea7106589e31bc36cc1aeb3715698862462a85220071921b249e5c52ee347560905a8eb7f2549d20c834c9898d35063c49e6e78454029f29761edf255ad1be

  • SSDEEP

    6144:kEgvubteuAXK77V5i4lZgyaGL9GAmM36lnnRmjx:kEgmtT77Vker5GAX8n

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      a076d621806451036285a601257723eb

    • Size

      372KB

    • MD5

      a076d621806451036285a601257723eb

    • SHA1

      bc3639959cf596199c412228c09fbcef79000533

    • SHA256

      67cae5ec23b17438274367b5ebdd078890805cd35b5c98089b7c2df8be080cb8

    • SHA512

      cfea7106589e31bc36cc1aeb3715698862462a85220071921b249e5c52ee347560905a8eb7f2549d20c834c9898d35063c49e6e78454029f29761edf255ad1be

    • SSDEEP

      6144:kEgvubteuAXK77V5i4lZgyaGL9GAmM36lnnRmjx:kEgmtT77Vker5GAX8n

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks