General

  • Target

    55578f3982b181a3fac31ec6b6a346f6164fdf21e9ee36353d9606fd1bb2efdd

  • Size

    373KB

  • Sample

    241110-2as6yazlek

  • MD5

    fc888906f6a0c5c7f5a21dd23d15e0b2

  • SHA1

    7a94c7232056f316559929b60ff0980b810de447

  • SHA256

    55578f3982b181a3fac31ec6b6a346f6164fdf21e9ee36353d9606fd1bb2efdd

  • SHA512

    68518ab79f5001262e620586e337869c120b6f8613536cf04169df44a54f02ed8853f7a2d759a8b6d212c861891c94cba5ae4f12cca81dd8c224ad3406824a49

  • SSDEEP

    6144:8EgVO784DlanspNVcSB4NcDgyOEHmmHylUonomFY/:8EgVO7dan4NOSBHgHEz

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      55578f3982b181a3fac31ec6b6a346f6164fdf21e9ee36353d9606fd1bb2efdd

    • Size

      373KB

    • MD5

      fc888906f6a0c5c7f5a21dd23d15e0b2

    • SHA1

      7a94c7232056f316559929b60ff0980b810de447

    • SHA256

      55578f3982b181a3fac31ec6b6a346f6164fdf21e9ee36353d9606fd1bb2efdd

    • SHA512

      68518ab79f5001262e620586e337869c120b6f8613536cf04169df44a54f02ed8853f7a2d759a8b6d212c861891c94cba5ae4f12cca81dd8c224ad3406824a49

    • SSDEEP

      6144:8EgVO784DlanspNVcSB4NcDgyOEHmmHylUonomFY/:8EgVO7dan4NOSBHgHEz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks