General

  • Target

    8b8161ec5559e04c5822cdccc7cbc800a608c6bcbcaa48361cf7747d1cafad56N.exe

  • Size

    354KB

  • Sample

    241110-2wlnzsxarr

  • MD5

    1bba3982a311e6d35afb5dad77b63b02

  • SHA1

    1a50177e525fd1cc34fc3c0f7e00a414ae855b1d

  • SHA256

    b5061440b36907f9b70174b144371609dbd17cd31047a76e67d55d3189f35951

  • SHA512

    e90969e67bdfa05a5011494d44458cf3eea63f57ff6d7e08fb3fe88d3512b31ff4fc42edde9818c7d6ae2c9c67a4fa24ac558eda7c948349a69f4f6d927b2f0b

  • SSDEEP

    6144:Irx/0CgkAuhC5f972TueBTeM7MTEDwZxB/1tr14najwwG:Mx/akAF5l7Sf7+E8ZxR/Wn4G

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      8b8161ec5559e04c5822cdccc7cbc800a608c6bcbcaa48361cf7747d1cafad56N.exe

    • Size

      354KB

    • MD5

      1bba3982a311e6d35afb5dad77b63b02

    • SHA1

      1a50177e525fd1cc34fc3c0f7e00a414ae855b1d

    • SHA256

      b5061440b36907f9b70174b144371609dbd17cd31047a76e67d55d3189f35951

    • SHA512

      e90969e67bdfa05a5011494d44458cf3eea63f57ff6d7e08fb3fe88d3512b31ff4fc42edde9818c7d6ae2c9c67a4fa24ac558eda7c948349a69f4f6d927b2f0b

    • SSDEEP

      6144:Irx/0CgkAuhC5f972TueBTeM7MTEDwZxB/1tr14najwwG:Mx/akAF5l7Sf7+E8ZxR/Wn4G

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks