General

  • Target

    4543d3f7691eed614dce74dcf6aff4e078597031

  • Size

    476KB

  • Sample

    241110-3kvyyswrgx

  • MD5

    2cd6bb713419269b6e434342f407617f

  • SHA1

    4543d3f7691eed614dce74dcf6aff4e078597031

  • SHA256

    6f1873a98f51ce6416b53c91ba1da19526d8e4912d06c9bfa934a728d81908ee

  • SHA512

    7e23f947035182673cafb99704d6d45fc5906eebbb811f10d89b9d309a32efbef1180916f4b336b1ac800e2492ed9914e2f832cb32900d03b2ae6a17a7380e92

  • SSDEEP

    12288:747Z1yXoa4EVm+BkxhwdCMECuNsvUhc+MwUJR4:9oa4EVn2pNrAyMpJ

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      4543d3f7691eed614dce74dcf6aff4e078597031

    • Size

      476KB

    • MD5

      2cd6bb713419269b6e434342f407617f

    • SHA1

      4543d3f7691eed614dce74dcf6aff4e078597031

    • SHA256

      6f1873a98f51ce6416b53c91ba1da19526d8e4912d06c9bfa934a728d81908ee

    • SHA512

      7e23f947035182673cafb99704d6d45fc5906eebbb811f10d89b9d309a32efbef1180916f4b336b1ac800e2492ed9914e2f832cb32900d03b2ae6a17a7380e92

    • SSDEEP

      12288:747Z1yXoa4EVm+BkxhwdCMECuNsvUhc+MwUJR4:9oa4EVn2pNrAyMpJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks