General

  • Target

    54c6c59481ba3049a8e53a6ebb135a591be2d717

  • Size

    407KB

  • Sample

    241111-affn9axhnr

  • MD5

    fee27edd9d1cbcf32689219aa0844fed

  • SHA1

    54c6c59481ba3049a8e53a6ebb135a591be2d717

  • SHA256

    dd75d1e100e5dcf2700c3e410b2e8734f2392f3ca322f5635386d340bec414e7

  • SHA512

    60727850f9983326eb93e3dcd176a73538ab8df8d68c06545843c219edc90ce83406c22c779946937155032d1c40a630546ec4594120f101834d877088943b11

  • SSDEEP

    12288:MvN/0O4n+iLxnFs0NMOQ/Au1ngdRx3lq3q:A4n+i1yXO2lgTx3l

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      54c6c59481ba3049a8e53a6ebb135a591be2d717

    • Size

      407KB

    • MD5

      fee27edd9d1cbcf32689219aa0844fed

    • SHA1

      54c6c59481ba3049a8e53a6ebb135a591be2d717

    • SHA256

      dd75d1e100e5dcf2700c3e410b2e8734f2392f3ca322f5635386d340bec414e7

    • SHA512

      60727850f9983326eb93e3dcd176a73538ab8df8d68c06545843c219edc90ce83406c22c779946937155032d1c40a630546ec4594120f101834d877088943b11

    • SSDEEP

      12288:MvN/0O4n+iLxnFs0NMOQ/Au1ngdRx3lq3q:A4n+i1yXO2lgTx3l

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks