General

  • Target

    8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557

  • Size

    1.5MB

  • Sample

    241111-abbjqs1map

  • MD5

    cf9935de9ba543d86b222e598e9a5be1

  • SHA1

    7655428e838bfd355d48a2c5ba34596bcf641944

  • SHA256

    8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557

  • SHA512

    fab841acbb5dfaac68dbb90a2b4d42d634a2cfc70e0dc173e6ce0ec9f417eeaa5c6443c97c53aac69939e23477390219cac8ca092b927ec2673db4de9c20dad7

  • SSDEEP

    24576:MyPfqZApjccVe9s9h7tTFu2KuINsY4nyd8goJIJXwh8Deo46sY1/7iD1dduS86rk:7PfqZej1e9KhRTQcKGI8gs0Xx6oUOg1a

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557

    • Size

      1.5MB

    • MD5

      cf9935de9ba543d86b222e598e9a5be1

    • SHA1

      7655428e838bfd355d48a2c5ba34596bcf641944

    • SHA256

      8b79dad54d61ac9299eff055681fcb9a5c0c076bb6371623ee0276ef093fb557

    • SHA512

      fab841acbb5dfaac68dbb90a2b4d42d634a2cfc70e0dc173e6ce0ec9f417eeaa5c6443c97c53aac69939e23477390219cac8ca092b927ec2673db4de9c20dad7

    • SSDEEP

      24576:MyPfqZApjccVe9s9h7tTFu2KuINsY4nyd8goJIJXwh8Deo46sY1/7iD1dduS86rk:7PfqZej1e9KhRTQcKGI8gs0Xx6oUOg1a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks