General

  • Target

    1cf6728114b3efa0d3030500581ed5fed93d5d40f98edf1d2a99869a22937f5e

  • Size

    297KB

  • Sample

    241111-ay4h2aycnq

  • MD5

    37eb92ccf25be89c122221b818239dbd

  • SHA1

    939835a2afabcd9d651a52179c513c8975c0869f

  • SHA256

    1cf6728114b3efa0d3030500581ed5fed93d5d40f98edf1d2a99869a22937f5e

  • SHA512

    0b922afb8184fd6702fc91872b4c0cb210517b1a220fe6b0adc279cdd549f210f0eac51bb2d569ed48eb05d591a0deb5cf20872ad807dbe2d054015afa7ced55

  • SSDEEP

    6144:veDYTC1NS0cq3v9mVk58x33Qj5RSM4s20YZR8X0wyz1UhiSZm8v:G0Gf7v4k582+s3Y4KzOBZmS

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23

    • Size

      398KB

    • MD5

      e2fbefdeabcf9efdaa69ff6039106b99

    • SHA1

      e26b3064f704e5eee3d87ad6a4e3c68ea3be7797

    • SHA256

      e30e4d6b74879a409c87ec6d067a41b5fcf83c37cecf27b4603ae0b13d4b2c23

    • SHA512

      2b2e7c446286f9e63d35c409204d4db72299250e1f0bbe6bdd1639854bc89b7b530df34ed50d130e7ea3421a940fdd7d55c09cb86f7335733fe5ce2330729d6a

    • SSDEEP

      6144:yLLYV4vNS0cq3t9mVk58x13Qj5RSo4s20YZc58xQ3xDPkMo5zXbAc:IkK7v6k58UgspYe58xaxDPyrbA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks