General

  • Target

    65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe

  • Size

    352KB

  • Sample

    241111-awszhsyclm

  • MD5

    f425b13be6e3a3359d4287603a1e1d7a

  • SHA1

    df7621b9d1388ab592da7621b9517ae6eb8e86b2

  • SHA256

    1752ae70f16d983129d6902b71581d240ee6d607fc815f20e122d76ab49b86af

  • SHA512

    a9babd05914dcd8c23f759b582e9c2b3cf9a94f2989579cdabe2877e15000592345c3daada4933cc09eeda154a26f05cafce2c6546344c147057b21986ee2bfe

  • SSDEEP

    6144:NP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjte:NBZoJ3rU6RH/wjjGte

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe

    • Size

      352KB

    • MD5

      f425b13be6e3a3359d4287603a1e1d7a

    • SHA1

      df7621b9d1388ab592da7621b9517ae6eb8e86b2

    • SHA256

      1752ae70f16d983129d6902b71581d240ee6d607fc815f20e122d76ab49b86af

    • SHA512

      a9babd05914dcd8c23f759b582e9c2b3cf9a94f2989579cdabe2877e15000592345c3daada4933cc09eeda154a26f05cafce2c6546344c147057b21986ee2bfe

    • SSDEEP

      6144:NP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjte:NBZoJ3rU6RH/wjjGte

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks