General

  • Target

    38d92ea6106e3ba847d45816c6381044cee6f13d

  • Size

    385KB

  • Sample

    241110-3gpmrswraz

  • MD5

    458e882fefd902273e3be00aa832ddf0

  • SHA1

    38d92ea6106e3ba847d45816c6381044cee6f13d

  • SHA256

    27fddd3467552e63a4cdf732d22549c0e3c3aa3e95a9931762c324aaa330601e

  • SHA512

    c4e26c85cb8da28cff1abf21d6504b14a76e71ab802850366c82e4658396bfcab58c0f0c521425b56a902a2a1564a46b2b5ef418ceb1daa12d2aa9b8832f27a9

  • SSDEEP

    6144:LVIUmj5tOmPZa4UefSL93f6fHdOizqBCI8L0B7y5PEm8:LVInj5gmRV83f6f9OUdZoln

Malware Config

Extracted

Family

redline

Botnet

RuzkiUNIKALNO

C2

193.233.48.58:38989

Attributes
  • auth_value

    c504b04cfbdd4bf85ce6195bcb37fba6

Targets

    • Target

      38d92ea6106e3ba847d45816c6381044cee6f13d

    • Size

      385KB

    • MD5

      458e882fefd902273e3be00aa832ddf0

    • SHA1

      38d92ea6106e3ba847d45816c6381044cee6f13d

    • SHA256

      27fddd3467552e63a4cdf732d22549c0e3c3aa3e95a9931762c324aaa330601e

    • SHA512

      c4e26c85cb8da28cff1abf21d6504b14a76e71ab802850366c82e4658396bfcab58c0f0c521425b56a902a2a1564a46b2b5ef418ceb1daa12d2aa9b8832f27a9

    • SSDEEP

      6144:LVIUmj5tOmPZa4UefSL93f6fHdOizqBCI8L0B7y5PEm8:LVInj5gmRV83f6f9OUdZoln

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks