General

  • Target

    6679f2379e357de0e2de1eb986e927c8629de53d0e27c32144a5d45f4d5e2486

  • Size

    372KB

  • Sample

    241111-a8qpxsyenl

  • MD5

    dbe351bab352888b2b670645b1f6b81a

  • SHA1

    ae677a3fae7203102d5c5e3d70b4904ffaeb5eeb

  • SHA256

    6679f2379e357de0e2de1eb986e927c8629de53d0e27c32144a5d45f4d5e2486

  • SHA512

    1eb867aee99f05364adede4c29cdbb29597f013e4f65fb9e9fbb935193100ea15224169a8fe90c0461f76d8b0142c699468cc6394912496db4d8973ecae63d9c

  • SSDEEP

    6144:iEgWNCOsa1ipGgSkONMRmd3Ij+4MNnWRJTZFy2Z16:iEgWNCZ8gSrUkY2WnZY

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      6679f2379e357de0e2de1eb986e927c8629de53d0e27c32144a5d45f4d5e2486

    • Size

      372KB

    • MD5

      dbe351bab352888b2b670645b1f6b81a

    • SHA1

      ae677a3fae7203102d5c5e3d70b4904ffaeb5eeb

    • SHA256

      6679f2379e357de0e2de1eb986e927c8629de53d0e27c32144a5d45f4d5e2486

    • SHA512

      1eb867aee99f05364adede4c29cdbb29597f013e4f65fb9e9fbb935193100ea15224169a8fe90c0461f76d8b0142c699468cc6394912496db4d8973ecae63d9c

    • SSDEEP

      6144:iEgWNCOsa1ipGgSkONMRmd3Ij+4MNnWRJTZFy2Z16:iEgWNCZ8gSrUkY2WnZY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks