General

  • Target

    39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b

  • Size

    468KB

  • Sample

    241110-j5bw2asma1

  • MD5

    3c57c801172b7ac3e3ed6c63eb3fc0ae

  • SHA1

    66563ec800fe815e9188bd3dc80ad02fdbab9670

  • SHA256

    39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b

  • SHA512

    583779d8d96bbedef75ad266a87f926e646a5249bc855041c7942b61287a9d0e39bee42d04df7c256ce63d01e5d8e405e1bb83b2ef0f90ae75e96862cf4e20a7

  • SSDEEP

    12288:5Mrfy90fLXTjHoz/19RMWEZb0P855H9us:GykTg93I0P8DHF

Malware Config

Extracted

Family

redline

Botnet

fukia

C2

193.233.20.13:4136

Attributes
  • auth_value

    e5783636fbd9e4f0cf9a017bce02e67e

Targets

    • Target

      39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b

    • Size

      468KB

    • MD5

      3c57c801172b7ac3e3ed6c63eb3fc0ae

    • SHA1

      66563ec800fe815e9188bd3dc80ad02fdbab9670

    • SHA256

      39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b

    • SHA512

      583779d8d96bbedef75ad266a87f926e646a5249bc855041c7942b61287a9d0e39bee42d04df7c256ce63d01e5d8e405e1bb83b2ef0f90ae75e96862cf4e20a7

    • SSDEEP

      12288:5Mrfy90fLXTjHoz/19RMWEZb0P855H9us:GykTg93I0P8DHF

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks