General

  • Target

    121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd

  • Size

    1.1MB

  • Sample

    241110-znt92svgjd

  • MD5

    61f8e650590ea6ba64069a4033c8e6c8

  • SHA1

    a71242eb060f3949929c85d07070c1caab327556

  • SHA256

    121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd

  • SHA512

    c12c61af9240bfd052e351994b70df6589f672b74c480e9434c5ec53465059584d1d41bc0692f6bcf0a794e97efa56479c1e95948a40d266ed5943e956ac63ae

  • SSDEEP

    24576:ryVn1icWxWwxX30DF6QRLMc0PnyqGueaUjl:eVUtn05vwFPnyq7e7

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd

    • Size

      1.1MB

    • MD5

      61f8e650590ea6ba64069a4033c8e6c8

    • SHA1

      a71242eb060f3949929c85d07070c1caab327556

    • SHA256

      121a9a0ed57e87dfa673ecf766aa898c6bf822247af79983b054e1e7bd4bbbbd

    • SHA512

      c12c61af9240bfd052e351994b70df6589f672b74c480e9434c5ec53465059584d1d41bc0692f6bcf0a794e97efa56479c1e95948a40d266ed5943e956ac63ae

    • SSDEEP

      24576:ryVn1icWxWwxX30DF6QRLMc0PnyqGueaUjl:eVUtn05vwFPnyq7e7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks