General

  • Target

    faf378866a2881deeaf32968e5edfdb710b8218f065c0d55700da635f906d57f

  • Size

    372KB

  • Sample

    241111-ac2sbaxhjm

  • MD5

    2837cdc8632c7c29d5a31208fc3f5e10

  • SHA1

    b601385a2a540e1ae26d3f2ca7dcb22e00490983

  • SHA256

    faf378866a2881deeaf32968e5edfdb710b8218f065c0d55700da635f906d57f

  • SHA512

    7a9b59c1bbf400932a277d0ad7a8e4007a992cf040e233fd5e75948a1dea933c0213bf8cf9407b86731df19a8954fcdc1e96aa552b10fa33329d70e899407c6a

  • SSDEEP

    6144:Sqbof/hxLmTW6fA36KOanvZuahUVxHwCU:NbonhxqTWL36KFBhUVxHn

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      faf378866a2881deeaf32968e5edfdb710b8218f065c0d55700da635f906d57f

    • Size

      372KB

    • MD5

      2837cdc8632c7c29d5a31208fc3f5e10

    • SHA1

      b601385a2a540e1ae26d3f2ca7dcb22e00490983

    • SHA256

      faf378866a2881deeaf32968e5edfdb710b8218f065c0d55700da635f906d57f

    • SHA512

      7a9b59c1bbf400932a277d0ad7a8e4007a992cf040e233fd5e75948a1dea933c0213bf8cf9407b86731df19a8954fcdc1e96aa552b10fa33329d70e899407c6a

    • SSDEEP

      6144:Sqbof/hxLmTW6fA36KOanvZuahUVxHwCU:NbonhxqTWL36KFBhUVxHn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks