General

  • Target

    cfc2eaed1afc5f088fedc7b4573136317a97d753d10a10422882353c7f3022fa

  • Size

    479KB

  • Sample

    241110-ldymtstlbs

  • MD5

    bae64bacd7803aa564438a756b2644ff

  • SHA1

    ab656bda62742dc018fd05a9e6acd8dde8b62b92

  • SHA256

    cfc2eaed1afc5f088fedc7b4573136317a97d753d10a10422882353c7f3022fa

  • SHA512

    0050ee430936889b118bb6e1d31483cad7caf6193b534d348511a667f4f38f3907cdb1696505889025bc7d046dad213f049fcbe1f5a35740049391906ef98d79

  • SSDEEP

    12288:KMrSy90W8xCpHLHrOfbhrQtJNfJkSdNvW:kyJxqSRNu

Malware Config

Extracted

Family

redline

Botnet

dumud

C2

217.196.96.101:4132

Attributes
  • auth_value

    3e18d4b90418aa3e78d8822e87c62f5c

Targets

    • Target

      cfc2eaed1afc5f088fedc7b4573136317a97d753d10a10422882353c7f3022fa

    • Size

      479KB

    • MD5

      bae64bacd7803aa564438a756b2644ff

    • SHA1

      ab656bda62742dc018fd05a9e6acd8dde8b62b92

    • SHA256

      cfc2eaed1afc5f088fedc7b4573136317a97d753d10a10422882353c7f3022fa

    • SHA512

      0050ee430936889b118bb6e1d31483cad7caf6193b534d348511a667f4f38f3907cdb1696505889025bc7d046dad213f049fcbe1f5a35740049391906ef98d79

    • SSDEEP

      12288:KMrSy90W8xCpHLHrOfbhrQtJNfJkSdNvW:kyJxqSRNu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks