General

  • Target

    6d1e6d3c3598a7e728fb0ef82d72ab1cf875781c9625fc45c286984ebcb11a65

  • Size

    168KB

  • Sample

    241110-3lptbsxgma

  • MD5

    aa1e28feae489c128e258993912dc9c0

  • SHA1

    c39447991713f63e2434734e3e7828b5bf837280

  • SHA256

    6d1e6d3c3598a7e728fb0ef82d72ab1cf875781c9625fc45c286984ebcb11a65

  • SHA512

    de4016e39ebd04dd99c9d4fc8d126475116cf303d738ee10571f39599c39ca57faf052409bb5abf0608452aebf70d7d8316e0e92e9198ccaef36a955658b0801

  • SSDEEP

    1536:PBcFPzjUqlVZRGWS6tmr0pKrvI6i+QSplTGqV0busg+mU3xou83wYki8e8hI:PGPn0yJpgJhxpcqVMUlU3xouU8e8hI

Malware Config

Extracted

Family

redline

Botnet

maher

C2

217.196.96.101:4132

Attributes
  • auth_value

    c57763165f68aabcf4874e661a1ffbac

Targets

    • Target

      6d1e6d3c3598a7e728fb0ef82d72ab1cf875781c9625fc45c286984ebcb11a65

    • Size

      168KB

    • MD5

      aa1e28feae489c128e258993912dc9c0

    • SHA1

      c39447991713f63e2434734e3e7828b5bf837280

    • SHA256

      6d1e6d3c3598a7e728fb0ef82d72ab1cf875781c9625fc45c286984ebcb11a65

    • SHA512

      de4016e39ebd04dd99c9d4fc8d126475116cf303d738ee10571f39599c39ca57faf052409bb5abf0608452aebf70d7d8316e0e92e9198ccaef36a955658b0801

    • SSDEEP

      1536:PBcFPzjUqlVZRGWS6tmr0pKrvI6i+QSplTGqV0busg+mU3xou83wYki8e8hI:PGPn0yJpgJhxpcqVMUlU3xouU8e8hI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks