General

  • Target

    b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0

  • Size

    272KB

  • Sample

    241110-rqe9xa1qhm

  • MD5

    b714c90bca830000168809301d7f0daf

  • SHA1

    1f02727413c113de12d4044270dfabc6fed7dde7

  • SHA256

    b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0

  • SHA512

    ea9ecfd88e875a2b286205d3910f76dda060f9cdbe10fbbafeba0128fd3d2fb5c7ba0f3dc56e3938cf25e644d46d0aba5f81b9cb5b369b0dee7539117336184b

  • SSDEEP

    3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q

Malware Config

Extracted

Family

redline

Botnet

romik

C2

193.233.20.12:4132

Attributes
  • auth_value

    8fb78d2889ba0ca42678b59b884e88ff

Targets

    • Target

      b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0

    • Size

      272KB

    • MD5

      b714c90bca830000168809301d7f0daf

    • SHA1

      1f02727413c113de12d4044270dfabc6fed7dde7

    • SHA256

      b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0

    • SHA512

      ea9ecfd88e875a2b286205d3910f76dda060f9cdbe10fbbafeba0128fd3d2fb5c7ba0f3dc56e3938cf25e644d46d0aba5f81b9cb5b369b0dee7539117336184b

    • SSDEEP

      3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks