General

  • Target

    4497e4b68647d861e85b322439c3656a790e3a2962a8bdc553c15cc78991cdbd

  • Size

    326KB

  • Sample

    241110-3jqmvawrez

  • MD5

    718bc098423fd660fd2e0f23e077ebc2

  • SHA1

    bd978962ff15033de81208800f97bcd04c73a8a2

  • SHA256

    4497e4b68647d861e85b322439c3656a790e3a2962a8bdc553c15cc78991cdbd

  • SHA512

    13b83780a69b16d9f8c72a8b6ea5d4f55b3b907e71b53ceda5c93b9ce6d7d4d2e7c98fabc82ae9246e461e91041845a9a0e8303d8113a65a52b56bc4515fdd94

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      4497e4b68647d861e85b322439c3656a790e3a2962a8bdc553c15cc78991cdbd

    • Size

      326KB

    • MD5

      718bc098423fd660fd2e0f23e077ebc2

    • SHA1

      bd978962ff15033de81208800f97bcd04c73a8a2

    • SHA256

      4497e4b68647d861e85b322439c3656a790e3a2962a8bdc553c15cc78991cdbd

    • SHA512

      13b83780a69b16d9f8c72a8b6ea5d4f55b3b907e71b53ceda5c93b9ce6d7d4d2e7c98fabc82ae9246e461e91041845a9a0e8303d8113a65a52b56bc4515fdd94

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks