General

  • Target

    e5f1f54caeccf5827338e5976b0f8d644a930d18cf03c71512459c3511006539

  • Size

    324KB

  • Sample

    241111-aqjhwsxpby

  • MD5

    0bd084926c6a943c9f7c44c6cda17b1f

  • SHA1

    af1fb8d1ce878619829ca950af5651bc9c327e69

  • SHA256

    e5f1f54caeccf5827338e5976b0f8d644a930d18cf03c71512459c3511006539

  • SHA512

    fe0ddd889783be53845d17b2f00e6c1b2bd442b40cde4c947da1873fc8f79b4078079dbbd26a1d4c76f3a770ca3e1fb65fbf9d1fd9d2a32e39cd98e613c48c73

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      e5f1f54caeccf5827338e5976b0f8d644a930d18cf03c71512459c3511006539

    • Size

      324KB

    • MD5

      0bd084926c6a943c9f7c44c6cda17b1f

    • SHA1

      af1fb8d1ce878619829ca950af5651bc9c327e69

    • SHA256

      e5f1f54caeccf5827338e5976b0f8d644a930d18cf03c71512459c3511006539

    • SHA512

      fe0ddd889783be53845d17b2f00e6c1b2bd442b40cde4c947da1873fc8f79b4078079dbbd26a1d4c76f3a770ca3e1fb65fbf9d1fd9d2a32e39cd98e613c48c73

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks