General

  • Target

    32b4519c522fded012df5cac189d1fb60fd3419f5039d74f01a396164b208776

  • Size

    1.1MB

  • Sample

    241110-dbvjdsxhjq

  • MD5

    291a42e5d5375fdae527e673760cd000

  • SHA1

    2387f407cb4fe54d28d6750f43b909f98212ad32

  • SHA256

    32b4519c522fded012df5cac189d1fb60fd3419f5039d74f01a396164b208776

  • SHA512

    d4770a040674be5293b2864aaf82fc4795f09aa098775ca464a92007a3be6ef2ab34d3d926c390b0d16baeaa174c517bbf42a077ffd0297ff08b5130f5caf358

  • SSDEEP

    24576:7yBfJXmIpcpTFltsld6xEnrrBqLx8po9dynN8:uBlfgztsld1rlEfEnN

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      32b4519c522fded012df5cac189d1fb60fd3419f5039d74f01a396164b208776

    • Size

      1.1MB

    • MD5

      291a42e5d5375fdae527e673760cd000

    • SHA1

      2387f407cb4fe54d28d6750f43b909f98212ad32

    • SHA256

      32b4519c522fded012df5cac189d1fb60fd3419f5039d74f01a396164b208776

    • SHA512

      d4770a040674be5293b2864aaf82fc4795f09aa098775ca464a92007a3be6ef2ab34d3d926c390b0d16baeaa174c517bbf42a077ffd0297ff08b5130f5caf358

    • SSDEEP

      24576:7yBfJXmIpcpTFltsld6xEnrrBqLx8po9dynN8:uBlfgztsld1rlEfEnN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks