General

  • Target

    530371011ff7d6895e026c6be7ba325233d1099908446aaeaaad75a254dfc99eN

  • Size

    345KB

  • Sample

    241110-3gmheawray

  • MD5

    a08ecead1e969ef6c97e78b0bfe22770

  • SHA1

    98d1c4aa25e730413cfe6b2f134645fa8bfdcc49

  • SHA256

    530371011ff7d6895e026c6be7ba325233d1099908446aaeaaad75a254dfc99e

  • SHA512

    5121369036801dc6c6f7b473e09773584cb20f5288dbe683f8e602b5e28dbb0e1a2069300c1cd9c1f106d07f3246c356e4774d75c153eaab38832d680daf80ad

  • SSDEEP

    6144:1iuo+rLcXfNbdX5AoKpelCoQqDmJLIGv7XpCd3bM/zDig02TpgBsDiYn:1iuTrYXfNb5yoKH2mJ/v70rOfigLKe

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      530371011ff7d6895e026c6be7ba325233d1099908446aaeaaad75a254dfc99eN

    • Size

      345KB

    • MD5

      a08ecead1e969ef6c97e78b0bfe22770

    • SHA1

      98d1c4aa25e730413cfe6b2f134645fa8bfdcc49

    • SHA256

      530371011ff7d6895e026c6be7ba325233d1099908446aaeaaad75a254dfc99e

    • SHA512

      5121369036801dc6c6f7b473e09773584cb20f5288dbe683f8e602b5e28dbb0e1a2069300c1cd9c1f106d07f3246c356e4774d75c153eaab38832d680daf80ad

    • SSDEEP

      6144:1iuo+rLcXfNbdX5AoKpelCoQqDmJLIGv7XpCd3bM/zDig02TpgBsDiYn:1iuTrYXfNb5yoKH2mJ/v70rOfigLKe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks