General

  • Target

    5240e323c0200ff9042a192c21247469170536ac7567859c3794793d4bcd54c9

  • Size

    240KB

  • Sample

    241110-3kf5sswrfz

  • MD5

    dbd9e663b170e15f14bdde8f3c024f01

  • SHA1

    1e077653d36877bc283f0a2e4a715f6c1bc8d05c

  • SHA256

    5240e323c0200ff9042a192c21247469170536ac7567859c3794793d4bcd54c9

  • SHA512

    a44f1dda95e8ef9c7d0d1d64b9376baa879864d6df32e2850c63653ba5a34f8272f752a1aec32b62c0cfc00fdf90e0c38ddcac7b477caeb04deb5d1a38f63dcb

  • SSDEEP

    3072:mjqTLgeXQHOuRFUMI6kxT2pp6rcpMVen6Xgoe/UY9JhT2ORu0P2X6Nfm:mjq/0OvH6kxyf6rcpMV2Jhru0uq

Malware Config

Extracted

Family

redline

Botnet

Server id Hgh

C2

185.183.35.100:44687

Attributes
  • auth_value

    d734fe4464d4eb497d749f83aeb08e66

Targets

    • Target

      5240e323c0200ff9042a192c21247469170536ac7567859c3794793d4bcd54c9

    • Size

      240KB

    • MD5

      dbd9e663b170e15f14bdde8f3c024f01

    • SHA1

      1e077653d36877bc283f0a2e4a715f6c1bc8d05c

    • SHA256

      5240e323c0200ff9042a192c21247469170536ac7567859c3794793d4bcd54c9

    • SHA512

      a44f1dda95e8ef9c7d0d1d64b9376baa879864d6df32e2850c63653ba5a34f8272f752a1aec32b62c0cfc00fdf90e0c38ddcac7b477caeb04deb5d1a38f63dcb

    • SSDEEP

      3072:mjqTLgeXQHOuRFUMI6kxT2pp6rcpMVen6Xgoe/UY9JhT2ORu0P2X6Nfm:mjq/0OvH6kxyf6rcpMV2Jhru0uq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks