General

  • Target

    5419e6e36fc2474fad349de8b96e4c56

  • Size

    373KB

  • Sample

    241111-b2l9lazbjq

  • MD5

    5419e6e36fc2474fad349de8b96e4c56

  • SHA1

    2f22e04f164371656f97377d2d7a6b1551410680

  • SHA256

    9e2b1da3e6911ff79c64ce45d4590d913c79c37b0cb58bed1e5539d455e2ac3f

  • SHA512

    d610962cbefb530cbd59a0fdba080cbc4f802ad93f9d4352b57ec540e0e5d69abeaabc13db662d08d0ffb198803b05980e35fbb0e151a2f13e767ddc055bd401

  • SSDEEP

    6144:WjEgPPZaX49i8HQskcmF+PsVzaBZ0kQYEPIDWg7DTtg+2Od:kEgHs4ECQsk0spIVQYMSDTt7

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      5419e6e36fc2474fad349de8b96e4c56

    • Size

      373KB

    • MD5

      5419e6e36fc2474fad349de8b96e4c56

    • SHA1

      2f22e04f164371656f97377d2d7a6b1551410680

    • SHA256

      9e2b1da3e6911ff79c64ce45d4590d913c79c37b0cb58bed1e5539d455e2ac3f

    • SHA512

      d610962cbefb530cbd59a0fdba080cbc4f802ad93f9d4352b57ec540e0e5d69abeaabc13db662d08d0ffb198803b05980e35fbb0e151a2f13e767ddc055bd401

    • SSDEEP

      6144:WjEgPPZaX49i8HQskcmF+PsVzaBZ0kQYEPIDWg7DTtg+2Od:kEgHs4ECQsk0spIVQYMSDTt7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks