General

  • Target

    351a51bdbafc077848a019f05a691f04e7addb886807f60b6e67e456a66581d7

  • Size

    329KB

  • Sample

    241111-a5gylsxrd1

  • MD5

    c2381caabda22af44b2e3c1a0f2076c4

  • SHA1

    41481d957475ba976f738db2402d689ae0f045d3

  • SHA256

    351a51bdbafc077848a019f05a691f04e7addb886807f60b6e67e456a66581d7

  • SHA512

    491e2637ec5b2c424bd8711f83b3b3f2328665277f9ea374be164872cca161ef95601fa7f6fc830672f6dfe835aa2ed3a5c83f754f3cfe870e9eec1e1449fa25

  • SSDEEP

    6144:wGQmC6r7777777s7gUAHm+HSf7ceGgyoAxW90Jn370ba2ekRAU04pw1CWofCXtPS:NMRAHm+HSz50TxzGekLpwtq0PS

Malware Config

Extracted

Family

redline

Botnet

@new@2023

C2

77.73.133.62:22344

Attributes
  • auth_value

    8284279aedaed026a9b7cb9c1c0be4e4

Targets

    • Target

      35270a0692daad63c217115444b18c541b53c80ebd26d605b3f4dc4009de61a8

    • Size

      430KB

    • MD5

      5b6475099bc679b985d4cbc75b37673d

    • SHA1

      b34dcb7ac05bfd9d6ade2c7d2bc0f95acc13bfc2

    • SHA256

      35270a0692daad63c217115444b18c541b53c80ebd26d605b3f4dc4009de61a8

    • SHA512

      a1fc13831da6a3381e7eb8eccdbbcc2d1ac7b1d8a0f4b39dbae50b3ebd7deb87d60f824ea2002d619dfaf8600dd3787ec4975a7b0860a31494a31810b9eb684a

    • SSDEEP

      6144:SLaAxHSfLceGgyOAxW90JnN70Ta2eGRAUeh58xQ3xDPkMo5zXbAc:SeAxHST50RxzeeGQh58xaxDPyrbA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks