General

  • Target

    7b11b801bf69c1c6a9f877f304d78bcdd0625824353b226cc6414445fdeabf76

  • Size

    407KB

  • Sample

    241111-an1dmaydqf

  • MD5

    0e790559a34992567e02c2ecdc43af07

  • SHA1

    272de1039f5a07d89af0cfb808fcfbb5fa5a82c2

  • SHA256

    7b11b801bf69c1c6a9f877f304d78bcdd0625824353b226cc6414445fdeabf76

  • SHA512

    05965daad20e89fb08dc5012524170d23c6f7872aa4146448771384a8177c75d7e2228e5a260d6beccdfe9fbd3532239228eca5f0cf8b46476551408128dd7c0

  • SSDEEP

    12288:t6PhF7P07sYCWyKrdsHVHBQwT2f2+m6ERNP:407sYz/MhQwibEj

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      7b11b801bf69c1c6a9f877f304d78bcdd0625824353b226cc6414445fdeabf76

    • Size

      407KB

    • MD5

      0e790559a34992567e02c2ecdc43af07

    • SHA1

      272de1039f5a07d89af0cfb808fcfbb5fa5a82c2

    • SHA256

      7b11b801bf69c1c6a9f877f304d78bcdd0625824353b226cc6414445fdeabf76

    • SHA512

      05965daad20e89fb08dc5012524170d23c6f7872aa4146448771384a8177c75d7e2228e5a260d6beccdfe9fbd3532239228eca5f0cf8b46476551408128dd7c0

    • SSDEEP

      12288:t6PhF7P07sYCWyKrdsHVHBQwT2f2+m6ERNP:407sYz/MhQwibEj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks