General

  • Target

    88b12c8c91be1238f95ec76738e93962d12eaea221c499cc7aa1dec20989053f

  • Size

    407KB

  • Sample

    241111-anhtks1pdm

  • MD5

    9d9fbf59ebd3c048728f71eff7811a5b

  • SHA1

    0337d9855c105b2bfd9665dc090fd0a5ac1c7963

  • SHA256

    88b12c8c91be1238f95ec76738e93962d12eaea221c499cc7aa1dec20989053f

  • SHA512

    65d985b49d8dfd452d28170812c60805277fd8634fa17185752b0ed54a7a2d1f2cdc5bdcfd8075d618288a87a903c8888b755b1069fadaa9f37c66888b8f06c8

  • SSDEEP

    12288:uzJu9nus9Nyb3RFcpknNt1/l3TukAcbaa:Gs9NCpnNt1/BqU

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      88b12c8c91be1238f95ec76738e93962d12eaea221c499cc7aa1dec20989053f

    • Size

      407KB

    • MD5

      9d9fbf59ebd3c048728f71eff7811a5b

    • SHA1

      0337d9855c105b2bfd9665dc090fd0a5ac1c7963

    • SHA256

      88b12c8c91be1238f95ec76738e93962d12eaea221c499cc7aa1dec20989053f

    • SHA512

      65d985b49d8dfd452d28170812c60805277fd8634fa17185752b0ed54a7a2d1f2cdc5bdcfd8075d618288a87a903c8888b755b1069fadaa9f37c66888b8f06c8

    • SSDEEP

      12288:uzJu9nus9Nyb3RFcpknNt1/l3TukAcbaa:Gs9NCpnNt1/BqU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks