General

  • Target

    7cb0e7940e9f0820dac408ecf5bcec3e07a6bdc9

  • Size

    296KB

  • Sample

    241111-b2q8jszbkl

  • MD5

    13b73084e936f53fb912687983e5a375

  • SHA1

    7cb0e7940e9f0820dac408ecf5bcec3e07a6bdc9

  • SHA256

    12979c7fecd558b7e14becc9c2400d6c2b9d92f1e9d65013f42188fef358789b

  • SHA512

    05f76adb32e7c21a7c1e140e60f93e67bb21c6f2110c155c0297f887953963928dcf358d751e62c31f4f710be187f99d87d5ae76c094564f95c5bf0544851861

  • SSDEEP

    3072:OEO/1O4QG167hvzE4LOWasx3QV8jpd5VQiNB/IgsjNGwRHpnbRY6cnEYx:rS4LOWamQQOpbu/E

Malware Config

Extracted

Family

redline

Botnet

mix

C2

193.106.191.25:47242

Attributes
  • auth_value

    5469d87831a100553f2f10d3aadec8bb

Targets

    • Target

      7cb0e7940e9f0820dac408ecf5bcec3e07a6bdc9

    • Size

      296KB

    • MD5

      13b73084e936f53fb912687983e5a375

    • SHA1

      7cb0e7940e9f0820dac408ecf5bcec3e07a6bdc9

    • SHA256

      12979c7fecd558b7e14becc9c2400d6c2b9d92f1e9d65013f42188fef358789b

    • SHA512

      05f76adb32e7c21a7c1e140e60f93e67bb21c6f2110c155c0297f887953963928dcf358d751e62c31f4f710be187f99d87d5ae76c094564f95c5bf0544851861

    • SSDEEP

      3072:OEO/1O4QG167hvzE4LOWasx3QV8jpd5VQiNB/IgsjNGwRHpnbRY6cnEYx:rS4LOWamQQOpbu/E

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks