General

  • Target

    0f0607c72bddb26fdb2c88f8c70ddba4ea9118d246a1afacba9ae9199822e1c1

  • Size

    51KB

  • Sample

    241110-3rrvwaxern

  • MD5

    0acc8f8d91dd17d652756049ed8be07f

  • SHA1

    2f4971cd32b0313d31f9fa64a792e07e803261bd

  • SHA256

    0f0607c72bddb26fdb2c88f8c70ddba4ea9118d246a1afacba9ae9199822e1c1

  • SHA512

    5ea18e374f3cbc3c96dae3d09edaee50c0cc826ebfd4a5b9fc26c38a7dddb8224d7d52f9e10f5ac790aea8a079d9708a32d5c27627f904cd8255fbf08f71f67d

  • SSDEEP

    1536:YouPTlWk9khAqTlF+wBqIKnRF/crbTIxC:Y3PJWkq5JF+wIL0rbGC

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Targets

    • Target

      796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57

    • Size

      175KB

    • MD5

      8637cb9b0ca8b58890c62d9a712c1ae0

    • SHA1

      cc331026eebfccd529dc95b39aec2d2fd72e8e2f

    • SHA256

      796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57

    • SHA512

      7f2061583db80b969f6886781af03151aa3e2b075d7b41a07d8c12a35c41afdda2160439d2b74ade622e228b2b8fa9a4937cb8a7da96700e0dab5ba03757f90a

    • SSDEEP

      3072:yxqZWFFa7E6T825De559yhGfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cO:gqZcMUyh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks