General

  • Target

    78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f

  • Size

    479KB

  • Sample

    241110-3hb33axdml

  • MD5

    8a92ab12196f4ad2ba9f5a3869c2de92

  • SHA1

    edf4b3df4da90000e945b070852986971c9f948c

  • SHA256

    78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f

  • SHA512

    3e319b709a5178ca9d4510a6b67e20b750287e9a3035d81b20e1fc353c980f3e652b7118034e4818b5b7500fe55de5cf8b2617942b86afbdffe959a861426e42

  • SSDEEP

    12288:6MrPy90QnHlmya15PYSVveZaecU5zuNlR:Zy3nHln65PuZTPM

Malware Config

Extracted

Family

redline

Botnet

dumud

C2

217.196.96.101:4132

Attributes
  • auth_value

    3e18d4b90418aa3e78d8822e87c62f5c

Targets

    • Target

      78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f

    • Size

      479KB

    • MD5

      8a92ab12196f4ad2ba9f5a3869c2de92

    • SHA1

      edf4b3df4da90000e945b070852986971c9f948c

    • SHA256

      78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f

    • SHA512

      3e319b709a5178ca9d4510a6b67e20b750287e9a3035d81b20e1fc353c980f3e652b7118034e4818b5b7500fe55de5cf8b2617942b86afbdffe959a861426e42

    • SSDEEP

      12288:6MrPy90QnHlmya15PYSVveZaecU5zuNlR:Zy3nHln65PuZTPM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks