General

  • Target

    c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e

  • Size

    404KB

  • Sample

    241111-a44qzsygph

  • MD5

    0dc4f1b527d83b3b49f5bacec0b8dfbc

  • SHA1

    b250793dd8a07fbd5f505e8875e5b3f956e6aef0

  • SHA256

    c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e

  • SHA512

    7f8b64251a35ae3ff3159454b21514c152843c1ee1f1ed51bdf50f0b1244d67f4022db259b6ed1452c6220158787f9dcb8414a34532a3319a9d6a04583bbb1f9

  • SSDEEP

    6144:JjW+ut4Oyy4KS3qyjqqMH2Gis/k6VcUa9DEvuzbgwu6L7ITsqSigaTwVf:pW+c4OyYS6DqthU7vunnn7s

Malware Config

Extracted

Family

redline

Botnet

udptest

C2

193.56.146.64:65441

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e

    • Size

      404KB

    • MD5

      0dc4f1b527d83b3b49f5bacec0b8dfbc

    • SHA1

      b250793dd8a07fbd5f505e8875e5b3f956e6aef0

    • SHA256

      c5f7cdb58d7865864357febaec71b93c6ac0b3f445f1608c5d6f10765e38f72e

    • SHA512

      7f8b64251a35ae3ff3159454b21514c152843c1ee1f1ed51bdf50f0b1244d67f4022db259b6ed1452c6220158787f9dcb8414a34532a3319a9d6a04583bbb1f9

    • SSDEEP

      6144:JjW+ut4Oyy4KS3qyjqqMH2Gis/k6VcUa9DEvuzbgwu6L7ITsqSigaTwVf:pW+c4OyYS6DqthU7vunnn7s

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks