General

  • Target

    bdb96b5875d16626ee4274980192730b00533c713a49f49ef5a639f235a6d3d8

  • Size

    272KB

  • Sample

    241110-3g28vszrbl

  • MD5

    2d1f1fe06b536dee9f026d005cbfb385

  • SHA1

    0986bc79be7f0a5a8735a8c2b996edea395f800f

  • SHA256

    bdb96b5875d16626ee4274980192730b00533c713a49f49ef5a639f235a6d3d8

  • SHA512

    06014a27e00a91cbce93c3cde2c447962cb3891bc23e444f0e12fb6301f72f10a8da81999927ae367a01c04c124589110c2b4982c4bb91cf23c8a614b0f93f99

  • SSDEEP

    6144:LlEntHw6QaxHWFjZla1kTpmBbUfOiwSuRmUeXRp6bRhLe8m6ThHH:5EtQKxHcla1gzdn0hLe8muH

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      996236800b860f745f36db401665bd372b749157b7d22c5d36fa7bd37404ce2f

    • Size

      361KB

    • MD5

      ba98553aaeb4689f6c4ec6b05491994e

    • SHA1

      8d3dd1dba143af04e928ed98582fb260f6a892bf

    • SHA256

      996236800b860f745f36db401665bd372b749157b7d22c5d36fa7bd37404ce2f

    • SHA512

      67a1e3b280deb1cc2494ea46032405df3142502a493abbd7c551329efa3a4084e0f66063e29799a0afbf21262c8818b3c266f046a6d0bc19dda060c164754bd0

    • SSDEEP

      6144:2JqSLeID0eRpwpOZla1kTpmBbUbOiwSuRQUeXRL6bRsraHp+DWV4b7i:2JqSvD0klla1gz590l4bu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks