General

  • Target

    17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d

  • Size

    479KB

  • Sample

    241110-3w9w9axfqn

  • MD5

    fd379066bd61ac2c6b5ab1562982c56a

  • SHA1

    a9eb72854992390c6abd56617366df785ec1a709

  • SHA256

    17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d

  • SHA512

    14cd833b1a24464f72b9dcc34f6f49a9b1103dc442329e25e120b6900cd2c65cef4ab27e75ca65f229d62d8c627642df37e2f9509968aae3d7b438517445786a

  • SSDEEP

    12288:0MrUy90pVoHObMWkd2pke75HeLoBuFatidv:QyAiIFSe74FFxv

Malware Config

Extracted

Family

redline

Botnet

dumud

C2

217.196.96.101:4132

Attributes
  • auth_value

    3e18d4b90418aa3e78d8822e87c62f5c

Targets

    • Target

      17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d

    • Size

      479KB

    • MD5

      fd379066bd61ac2c6b5ab1562982c56a

    • SHA1

      a9eb72854992390c6abd56617366df785ec1a709

    • SHA256

      17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d

    • SHA512

      14cd833b1a24464f72b9dcc34f6f49a9b1103dc442329e25e120b6900cd2c65cef4ab27e75ca65f229d62d8c627642df37e2f9509968aae3d7b438517445786a

    • SSDEEP

      12288:0MrUy90pVoHObMWkd2pke75HeLoBuFatidv:QyAiIFSe74FFxv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks