General

  • Target

    34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769

  • Size

    1.1MB

  • Sample

    241110-lbx9aaxkfn

  • MD5

    f74c3ab777531e28bcaec0a9169e7245

  • SHA1

    6aa4d109ca99a9dfeef6746b45a7fecfd3cf5e79

  • SHA256

    34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769

  • SHA512

    10623bc8550ab302a56d45193c05fcf49233363425abdf98e80059bebbc62b7f078128cce9f7f01b33f6987a1dbdd0ce56b982860d0859977d45e48081602147

  • SSDEEP

    24576:SysADYIY53rJpoZRoM+QXc43ac+i72Z0KO9ZpzGe6pnPEJP131he:59DYIs3rJy3nJcOGZABGeDvh

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769

    • Size

      1.1MB

    • MD5

      f74c3ab777531e28bcaec0a9169e7245

    • SHA1

      6aa4d109ca99a9dfeef6746b45a7fecfd3cf5e79

    • SHA256

      34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769

    • SHA512

      10623bc8550ab302a56d45193c05fcf49233363425abdf98e80059bebbc62b7f078128cce9f7f01b33f6987a1dbdd0ce56b982860d0859977d45e48081602147

    • SSDEEP

      24576:SysADYIY53rJpoZRoM+QXc43ac+i72Z0KO9ZpzGe6pnPEJP131he:59DYIs3rJy3nJcOGZABGeDvh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks