General

  • Target

    240c6f7d34619cdf0bf67de2d7effd003bd51679fd254a00caa7c22af42d4564

  • Size

    272KB

  • Sample

    241110-j44weswmdm

  • MD5

    4e765f47ae22518bd47fa1906d25e7c6

  • SHA1

    135b854e0758c362dd5001d848e8613d61b69cb6

  • SHA256

    240c6f7d34619cdf0bf67de2d7effd003bd51679fd254a00caa7c22af42d4564

  • SHA512

    baafccc0c5f9a7d6f11a0d382164ac1376f39ac553759b8ce48c3294158673e6ffc1226c08234601fb6980ec938e1588afc02b1ea61d3e233a4b738d125f9058

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Targets

    • Target

      240c6f7d34619cdf0bf67de2d7effd003bd51679fd254a00caa7c22af42d4564

    • Size

      272KB

    • MD5

      4e765f47ae22518bd47fa1906d25e7c6

    • SHA1

      135b854e0758c362dd5001d848e8613d61b69cb6

    • SHA256

      240c6f7d34619cdf0bf67de2d7effd003bd51679fd254a00caa7c22af42d4564

    • SHA512

      baafccc0c5f9a7d6f11a0d382164ac1376f39ac553759b8ce48c3294158673e6ffc1226c08234601fb6980ec938e1588afc02b1ea61d3e233a4b738d125f9058

    • SSDEEP

      3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks