General

  • Target

    ca104a41586520c391a664bb2d654418a9d01be82671b471782bb565ded26662

  • Size

    441KB

  • Sample

    241111-ae8nms1mhj

  • MD5

    e5bb126cde97bf6a57f52b3e9266fc01

  • SHA1

    46ba4e0e3908357826a48864ee9a2da67901006f

  • SHA256

    ca104a41586520c391a664bb2d654418a9d01be82671b471782bb565ded26662

  • SHA512

    1a5978e6325678c8bab6a84463c720cbcf29b62d638e573ccd92d66723e77c111b4972c85ecc63d540e900b5f01e676f88dad6aeefd9e4915afc86b7a71f857f

  • SSDEEP

    12288:PMrny90Axcr2wrrAOebAYs1zF6KqOP6goaGqNrx:Qy3crZrrAxsT6KqP6f

Malware Config

Extracted

Family

redline

Botnet

rodik

C2

193.233.20.23:4124

Attributes
  • auth_value

    59b6e22e7cfd9b5fa0c99d1942f7c85d

Targets

    • Target

      ca104a41586520c391a664bb2d654418a9d01be82671b471782bb565ded26662

    • Size

      441KB

    • MD5

      e5bb126cde97bf6a57f52b3e9266fc01

    • SHA1

      46ba4e0e3908357826a48864ee9a2da67901006f

    • SHA256

      ca104a41586520c391a664bb2d654418a9d01be82671b471782bb565ded26662

    • SHA512

      1a5978e6325678c8bab6a84463c720cbcf29b62d638e573ccd92d66723e77c111b4972c85ecc63d540e900b5f01e676f88dad6aeefd9e4915afc86b7a71f857f

    • SSDEEP

      12288:PMrny90Axcr2wrrAOebAYs1zF6KqOP6goaGqNrx:Qy3crZrrAxsT6KqP6f

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks