General

  • Target

    ef18d04a650bd4e2290ee1c840f4e8444c99ad8e012b7b8456a071eb1efff21eN

  • Size

    177KB

  • Sample

    241111-alen5sxndt

  • MD5

    8f0d09a77114bfdaf128eb9ae1c04f60

  • SHA1

    551b0e4f3b3835eaae276f5855567a10841a3e8a

  • SHA256

    ef18d04a650bd4e2290ee1c840f4e8444c99ad8e012b7b8456a071eb1efff21e

  • SHA512

    804b84a5dbc4eaf634c5b215e0f4431847b90462b92a624a9002dae2cb3422425ec2f471e3fa0b11f4e1e623b7ad4b2b1da06efa32417f31cba8d020c4b0918c

  • SSDEEP

    3072:OxqZWXragQx+/Z5reN5FchA/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cU:0qZWZ5gch

Malware Config

Extracted

Family

redline

Botnet

forma

C2

193.233.20.24:4123

Attributes
  • auth_value

    50b8e065d7cb1e9e30786f7a370368f9

Targets

    • Target

      ef18d04a650bd4e2290ee1c840f4e8444c99ad8e012b7b8456a071eb1efff21eN

    • Size

      177KB

    • MD5

      8f0d09a77114bfdaf128eb9ae1c04f60

    • SHA1

      551b0e4f3b3835eaae276f5855567a10841a3e8a

    • SHA256

      ef18d04a650bd4e2290ee1c840f4e8444c99ad8e012b7b8456a071eb1efff21e

    • SHA512

      804b84a5dbc4eaf634c5b215e0f4431847b90462b92a624a9002dae2cb3422425ec2f471e3fa0b11f4e1e623b7ad4b2b1da06efa32417f31cba8d020c4b0918c

    • SSDEEP

      3072:OxqZWXragQx+/Z5reN5FchA/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cU:0qZWZ5gch

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks