General

  • Target

    57ac94158ce2122e217d15fc5c619862e85af024f68ec509185e93dfb8227db2

  • Size

    295KB

  • Sample

    241110-2sg7dszngm

  • MD5

    d81ed22d38fd90a02a1550fdbf2bb6d9

  • SHA1

    4545ec628a5003c2ecf50d13a783924c98d4a7b7

  • SHA256

    57ac94158ce2122e217d15fc5c619862e85af024f68ec509185e93dfb8227db2

  • SHA512

    0ecc257038b5af6df7a6acaa0643a5b024f697ecf657828395936705cb1c4548f7b93847776eb991e12e881e5bb731616515426dd2b80c64ae9ae456d90e264c

  • SSDEEP

    6144:V4DF3+tzeuO5w/fmHgvckt0ytzydvMCdKCZ5V:cIiZV8t4oA

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      57ac94158ce2122e217d15fc5c619862e85af024f68ec509185e93dfb8227db2

    • Size

      295KB

    • MD5

      d81ed22d38fd90a02a1550fdbf2bb6d9

    • SHA1

      4545ec628a5003c2ecf50d13a783924c98d4a7b7

    • SHA256

      57ac94158ce2122e217d15fc5c619862e85af024f68ec509185e93dfb8227db2

    • SHA512

      0ecc257038b5af6df7a6acaa0643a5b024f697ecf657828395936705cb1c4548f7b93847776eb991e12e881e5bb731616515426dd2b80c64ae9ae456d90e264c

    • SSDEEP

      6144:V4DF3+tzeuO5w/fmHgvckt0ytzydvMCdKCZ5V:cIiZV8t4oA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks