General

  • Target

    3ef42ced266029327e2e77bb67fe144a7dce96cdafc61278a64bc183037ca67f

  • Size

    334KB

  • Sample

    241111-anaszayaqm

  • MD5

    56463008d6e4a23b1cc59f9a12e2ae12

  • SHA1

    45f113de17242600d05621d82a22bf5806ad576c

  • SHA256

    3ef42ced266029327e2e77bb67fe144a7dce96cdafc61278a64bc183037ca67f

  • SHA512

    93e2595cac3ab4004da21ba30ca3549f99cd83c2dd277b3d155faa71b1f501e6f3b69e96042b2b29ecae45ad279d33f555adc95c9d850d1ffdae72ed1ae0ab1c

  • SSDEEP

    6144:ocrDMyUWAVUyZDr+MTT74hTG+LJzDXyBqm6188c9AjrN7CbVzhPun6JqZmlLAcl:vA2kB74EG4q/1Nc2ZObVhun6JqZmlT

Malware Config

Extracted

Family

redline

Botnet

@new@2023

C2

77.73.133.62:22344

Attributes
  • auth_value

    8284279aedaed026a9b7cb9c1c0be4e4

Targets

    • Target

      8e011d62273f132f8b643619be84d6a3e868b9ddacb15db75d855a4f3ed03eee

    • Size

      440KB

    • MD5

      cb1b17aabe2d679b05e9e297d2215186

    • SHA1

      e001ec1b7f413911eaac7e7a598a248f130c9f9f

    • SHA256

      8e011d62273f132f8b643619be84d6a3e868b9ddacb15db75d855a4f3ed03eee

    • SHA512

      c07edc4cc80843b188dfceafbfc338d3e8dc692287eace02414565a123e5a67e035b42fe9012ad6fd6a0bfe6cfe4d3ba25cca053685a07628c0f587eb87957ea

    • SSDEEP

      6144:PLSPTH2VUyZDrAMTT74hTg+LblDXyBqm6B88c9AIq1yIxZ1WqqdSv9x:P+PTH22kH746GIq/BNcg1dYU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks