General

  • Target

    5b467453989ec7d8ad1457d12408911ab5b79beb6551fef78abe4ab84be7d964

  • Size

    325KB

  • Sample

    241111-agdw2sycme

  • MD5

    07e1895ee69adfb1a39d4f774fe9ec12

  • SHA1

    09486f8af40252ce3b89f544e46e4325400a647d

  • SHA256

    5b467453989ec7d8ad1457d12408911ab5b79beb6551fef78abe4ab84be7d964

  • SHA512

    4f590a63dc833df60ce8e303f3f2ae2c38af4c1bbdcb4a3c50ac47b703365097012cbf35a3f082f7b15135657393e32eb15c8b16d441c4f2c084f9649edb760a

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      5b467453989ec7d8ad1457d12408911ab5b79beb6551fef78abe4ab84be7d964

    • Size

      325KB

    • MD5

      07e1895ee69adfb1a39d4f774fe9ec12

    • SHA1

      09486f8af40252ce3b89f544e46e4325400a647d

    • SHA256

      5b467453989ec7d8ad1457d12408911ab5b79beb6551fef78abe4ab84be7d964

    • SHA512

      4f590a63dc833df60ce8e303f3f2ae2c38af4c1bbdcb4a3c50ac47b703365097012cbf35a3f082f7b15135657393e32eb15c8b16d441c4f2c084f9649edb760a

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks