General

  • Target

    80abcd4e17ae1a463b8825b5fb086e8baf795689

  • Size

    400KB

  • Sample

    241110-3kte5axdqm

  • MD5

    e8997f9b19e19bbde83044487ce63b6a

  • SHA1

    80abcd4e17ae1a463b8825b5fb086e8baf795689

  • SHA256

    2f91555fcedbeb352e35cc8f09485e4cd3370c291b08320cf2a8abb12970ca99

  • SHA512

    ee5415f5b020451926872c498b36a18d2897520e4b9ff737b941fd88f7b1273217c31a37583d262aff0d327bf6f2dcae432efd4dd0159a92f86ea1868d3c6b70

  • SSDEEP

    12288:rD7lOFmSzMFxmJhhMWa+EiVgVl3hdNnzvPvJ:X7CuFahGWa+VqRzPv

Malware Config

Extracted

Family

redline

Botnet

Ruzki

C2

193.233.48.58:38989

Attributes
  • auth_value

    80c38cc7772c328c028b0e4f42a3fac6

Targets

    • Target

      80abcd4e17ae1a463b8825b5fb086e8baf795689

    • Size

      400KB

    • MD5

      e8997f9b19e19bbde83044487ce63b6a

    • SHA1

      80abcd4e17ae1a463b8825b5fb086e8baf795689

    • SHA256

      2f91555fcedbeb352e35cc8f09485e4cd3370c291b08320cf2a8abb12970ca99

    • SHA512

      ee5415f5b020451926872c498b36a18d2897520e4b9ff737b941fd88f7b1273217c31a37583d262aff0d327bf6f2dcae432efd4dd0159a92f86ea1868d3c6b70

    • SSDEEP

      12288:rD7lOFmSzMFxmJhhMWa+EiVgVl3hdNnzvPvJ:X7CuFahGWa+VqRzPv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks