General

  • Target

    e1491fc11033dbeda925d43b1e6d86cc8b67fe05d2a494117715ca5f058004ff

  • Size

    225KB

  • Sample

    241110-z8kw4swbpd

  • MD5

    4365a5dd482b9c36d921a01933723ecd

  • SHA1

    fd8ebe79b8bb1609dcfa482c255dd62bb4b32a9d

  • SHA256

    e1491fc11033dbeda925d43b1e6d86cc8b67fe05d2a494117715ca5f058004ff

  • SHA512

    e1323848fa0eb3bd0d4b5609c3ee3e1ae56a86f52ea832cff1785b304ea2a9ea5189f1bafd8e4cf6a45c489d22abedc4a2c2ee93ad8ff01dc3125a84cf6e03ed

  • SSDEEP

    6144:VF8smK/XXWRJHW8Da85pSxFCrUV1hjKd76UJHbKvgtm4Gg:VNk5eqSxFCoJKnJHbn84p

Malware Config

Extracted

Family

redline

Botnet

@fjiif563

C2

79.137.192.7:39946

Attributes
  • auth_value

    ef361597d90539bf547a8edad2ebafde

Targets

    • Target

      99574d9f64bd750fd89fedefe1dce8bbbd81eeaf740140f7887e92aaf5fea53b.exe

    • Size

      3.8MB

    • MD5

      14ae061d2f3d893b73f816233f833e1c

    • SHA1

      91815c95027572a773b3966156d96f43eef17483

    • SHA256

      99574d9f64bd750fd89fedefe1dce8bbbd81eeaf740140f7887e92aaf5fea53b

    • SHA512

      0f586abd6931d1747b2db4555449b82ff1888b6320401b12aa25774c52464e945c00738fbcd993ebab4b99c0287015671bf7d3eaaa698a3b54275b2046497e11

    • SSDEEP

      6144:V/yF3ZHXX5kCoW10AKurlQ9oLbf8NNG8lHdUNVJQJw:wTXX2NW1VK469KT8S89eJQ2

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks