General

  • Target

    90d19f1102639317bfe67d772727b51049ebbf298e2447bd24de97d7eedcd919

  • Size

    64KB

  • Sample

    241111-arax5syeke

  • MD5

    307e120f85207f6b83120e40bff03b3e

  • SHA1

    0456d3f519f88291619e6a895b9ca0746923706d

  • SHA256

    90d19f1102639317bfe67d772727b51049ebbf298e2447bd24de97d7eedcd919

  • SHA512

    b2fcb2e1400a5cf1bc9464fa2d56e33045acd781daca902ffa836819fd9ae58c2d803c907fd64894de12c008f5ff9b78c97a5caecf3d923df90d18c71de256fc

  • SSDEEP

    1536:2j8ibNb5L/lAnJPSmHUDAMjcARnWHRTVD5C:2j8iV5jlAJzAAMjcqn2Ra

Malware Config

Extracted

Family

redline

Botnet

dease

C2

217.196.96.101:4132

Attributes
  • auth_value

    82e4d5f9abc21848e0345118814a4e6c

Targets

    • Target

      232269a3b0d23218727580a5348ab933bd607e82fb06ed9919e3da507ebb7b49

    • Size

      168KB

    • MD5

      cf6fe3f2905917a39517c4e88ecc35d6

    • SHA1

      5649f11fc6387301afafefd0c2c319e1bdd9aa08

    • SHA256

      232269a3b0d23218727580a5348ab933bd607e82fb06ed9919e3da507ebb7b49

    • SHA512

      7915d9efe281d5e1404c413e6176f0ed4df9398e6f01c67fa983d3decf0c154937137f395a6d4d5be0ae60b440f30d6fc5f1a2fbb4c635ff9a68c8551e302399

    • SSDEEP

      1536:ifWUYxyGqlVZRGWFxDrkNla5RKDecm+sVsa+ZTGqVIbuSN5IDoVayvp83wYkB8e/:fwBN5fp+dLoqV4lIkVayvpr8e8hi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks