General

  • Target

    f6f140c4bb79ffc416c08dea742a7708bd3c89dd

  • Size

    407KB

  • Sample

    241111-a3t56a1rgp

  • MD5

    cc53293c8457441d065121a9e597b942

  • SHA1

    f6f140c4bb79ffc416c08dea742a7708bd3c89dd

  • SHA256

    3700802f6401aeef1b6e05575a17acdd8f2ede0bfca36cfd2734b1b5bcb65aee

  • SHA512

    6b4be848fddb94413b7651f5487cc1a223f0e8ed718fd900249a3a2dc3e64b9c9f617da8dd84fd4548781b82e554f527ff9ada4c2c643eca78ef3c7b3472d1b7

  • SSDEEP

    12288:uzJu9nus9Nyb3RFcpknNt1/l3TukAcbaa:Gs9NCpnNt1/BqU

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      f6f140c4bb79ffc416c08dea742a7708bd3c89dd

    • Size

      407KB

    • MD5

      cc53293c8457441d065121a9e597b942

    • SHA1

      f6f140c4bb79ffc416c08dea742a7708bd3c89dd

    • SHA256

      3700802f6401aeef1b6e05575a17acdd8f2ede0bfca36cfd2734b1b5bcb65aee

    • SHA512

      6b4be848fddb94413b7651f5487cc1a223f0e8ed718fd900249a3a2dc3e64b9c9f617da8dd84fd4548781b82e554f527ff9ada4c2c643eca78ef3c7b3472d1b7

    • SSDEEP

      12288:uzJu9nus9Nyb3RFcpknNt1/l3TukAcbaa:Gs9NCpnNt1/BqU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks