General

  • Target

    1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

  • Size

    297KB

  • Sample

    241110-z7wxzsymak

  • MD5

    b4e46cb20d99fbe0e84d14189042dcec

  • SHA1

    04c2df3ad7344eb3e55ef48795f1c75a85c049fa

  • SHA256

    1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

  • SHA512

    0724a1274e85a0fef82db14006a16b342dae3b60aaee3622c1da546f69da22252a1b82f88e296407372fd0cb604de0f41f8fe6e2857ec9248885a1338346134f

  • SSDEEP

    6144:+Xz/ugbzUl2AlML93TrZpekCgKVUoYVd+An:+Xz/tzUl/CTpFCZxYDl

Malware Config

Extracted

Family

redline

Botnet

@chicago

C2

185.11.61.125:22344

Attributes
  • auth_value

    21f863e0cbd09d0681058e068d0d1d7f

Targets

    • Target

      1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

    • Size

      297KB

    • MD5

      b4e46cb20d99fbe0e84d14189042dcec

    • SHA1

      04c2df3ad7344eb3e55ef48795f1c75a85c049fa

    • SHA256

      1aac4153ab3c582dd44958df164822f5179606e21e4e3e179a72709d9c999792

    • SHA512

      0724a1274e85a0fef82db14006a16b342dae3b60aaee3622c1da546f69da22252a1b82f88e296407372fd0cb604de0f41f8fe6e2857ec9248885a1338346134f

    • SSDEEP

      6144:+Xz/ugbzUl2AlML93TrZpekCgKVUoYVd+An:+Xz/tzUl/CTpFCZxYDl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks