General

  • Target

    0ad0ca8115585ee8a3baa2332cbd27c0

  • Size

    415KB

  • Sample

    241110-3n9araxgqf

  • MD5

    0ad0ca8115585ee8a3baa2332cbd27c0

  • SHA1

    27d1187154dd941767507fd7fe921d684b1ffe85

  • SHA256

    1f854e3e4c222b35548e084b8370b665f1ee814c6b6e3523c3e892a5e8aaf175

  • SHA512

    d8c7e77774f9ec868685dedc3bd622738c1f9efff3e8d3602b554c348d99ac60749f4ee7fe229b029c0824141b98a19cca6f6c1e46ab4316758b568946518ec0

  • SSDEEP

    6144:Wn+zIli8A+EjRPOY8GfVfMY/mkgQDTZsSvYPea6ekgSzbokGBWYSEyP:W+zj85EVWY8GfV7ekZuN27ekgUckGBN

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      0ad0ca8115585ee8a3baa2332cbd27c0

    • Size

      415KB

    • MD5

      0ad0ca8115585ee8a3baa2332cbd27c0

    • SHA1

      27d1187154dd941767507fd7fe921d684b1ffe85

    • SHA256

      1f854e3e4c222b35548e084b8370b665f1ee814c6b6e3523c3e892a5e8aaf175

    • SHA512

      d8c7e77774f9ec868685dedc3bd622738c1f9efff3e8d3602b554c348d99ac60749f4ee7fe229b029c0824141b98a19cca6f6c1e46ab4316758b568946518ec0

    • SSDEEP

      6144:Wn+zIli8A+EjRPOY8GfVfMY/mkgQDTZsSvYPea6ekgSzbokGBWYSEyP:W+zj85EVWY8GfV7ekZuN27ekgUckGBN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks