General

  • Target

    65f28ce947139232be0e1fe043e580016dad8a094714c694b77c995b3c060f7d

  • Size

    372KB

  • Sample

    241111-anm4asydqc

  • MD5

    de9776c2a2adee49b0822e59068ddbcd

  • SHA1

    f0d00aaa7c7e1ffb1732565d8e450e0b8fd6b6c7

  • SHA256

    65f28ce947139232be0e1fe043e580016dad8a094714c694b77c995b3c060f7d

  • SHA512

    bda6b9bb3f16b17c55cec4d8c95c9a327e3383979f60c772acd1cf1fe8c2ff6b2a471dfbea79ecf1ff8cd9689c69e1ead91d8ee14cf712c5b757802e56238b46

  • SSDEEP

    6144:83EgUH6ePWyeiCfTDpPR9hk7sE9NYq4099j5khau:MEgUH6ePznCfTDpPR9hAYp0L4a

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      65f28ce947139232be0e1fe043e580016dad8a094714c694b77c995b3c060f7d

    • Size

      372KB

    • MD5

      de9776c2a2adee49b0822e59068ddbcd

    • SHA1

      f0d00aaa7c7e1ffb1732565d8e450e0b8fd6b6c7

    • SHA256

      65f28ce947139232be0e1fe043e580016dad8a094714c694b77c995b3c060f7d

    • SHA512

      bda6b9bb3f16b17c55cec4d8c95c9a327e3383979f60c772acd1cf1fe8c2ff6b2a471dfbea79ecf1ff8cd9689c69e1ead91d8ee14cf712c5b757802e56238b46

    • SSDEEP

      6144:83EgUH6ePWyeiCfTDpPR9hk7sE9NYq4099j5khau:MEgUH6ePznCfTDpPR9hAYp0L4a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks