General

  • Target

    436b17f623631e69d84f3bf1492554093550d245898257d08b8bdf67afd4c075

  • Size

    293KB

  • Sample

    241110-z795lsvmet

  • MD5

    935b38f6edce27b1ccc95f297ff5b0f2

  • SHA1

    eddaa5f7d5e46879fbccc4950222fbc1ddb0a5a2

  • SHA256

    436b17f623631e69d84f3bf1492554093550d245898257d08b8bdf67afd4c075

  • SHA512

    81c1df1318d1928b867dcfed3828f77a8856a43ff4acf451e31bc13aba268c5e80f967623b49d6452d0b01d6e6bc3654a3b957b803536e969da0f554e857194b

  • SSDEEP

    3072:ZO47c9gdpYTkBZUFfhuI2GcnQ1AqMwP4nw88EWQGlGfAG4XUUykzyxOJh86lbiAf:f7cs6wBZm2pnQ1Ww1EsQIcUykDjB

Malware Config

Extracted

Family

redline

Botnet

@chicago

C2

185.11.61.125:22344

Attributes
  • auth_value

    21f863e0cbd09d0681058e068d0d1d7f

Targets

    • Target

      436b17f623631e69d84f3bf1492554093550d245898257d08b8bdf67afd4c075

    • Size

      293KB

    • MD5

      935b38f6edce27b1ccc95f297ff5b0f2

    • SHA1

      eddaa5f7d5e46879fbccc4950222fbc1ddb0a5a2

    • SHA256

      436b17f623631e69d84f3bf1492554093550d245898257d08b8bdf67afd4c075

    • SHA512

      81c1df1318d1928b867dcfed3828f77a8856a43ff4acf451e31bc13aba268c5e80f967623b49d6452d0b01d6e6bc3654a3b957b803536e969da0f554e857194b

    • SSDEEP

      3072:ZO47c9gdpYTkBZUFfhuI2GcnQ1AqMwP4nw88EWQGlGfAG4XUUykzyxOJh86lbiAf:f7cs6wBZm2pnQ1Ww1EsQIcUykDjB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks