General

  • Target

    807aaf154274fef4e81deef96d3a2b99d3c0938ee389e88a2653b740e1ad26e8

  • Size

    258KB

  • Sample

    241111-b378fssqfq

  • MD5

    49737f38c734c005142787d25c63ef2d

  • SHA1

    4127c9a30038d666423f32b9941803415eaedd8b

  • SHA256

    807aaf154274fef4e81deef96d3a2b99d3c0938ee389e88a2653b740e1ad26e8

  • SHA512

    328265e23c4626c448b7923a3f5ac4b932b0d81296d2b552579d33e2524578c786504efa155bdab39f659e0765e0b5b7430c5e6df7c844fe09b53680735fafb4

  • SSDEEP

    6144:sIJWm6nc6P4ZR3yfsvElEUhNvyzNW/a64D:VkdPDfs9Uhlyz4s

Malware Config

Extracted

Family

redline

Botnet

trud

C2

31.41.244.198:4083

Attributes
  • auth_value

    a5942e18edc400a8c1782120906798ef

Targets

    • Target

      764f123c098af1fe565354f7ba7dbe954b78deee536582e9e2d264fcd5801923

    • Size

      349KB

    • MD5

      58a3b652558e73522a576be9ee4c3c03

    • SHA1

      8ad695419ddf42fcce945e84308125b58de58aba

    • SHA256

      764f123c098af1fe565354f7ba7dbe954b78deee536582e9e2d264fcd5801923

    • SHA512

      bdc481ab2afebb0c8ac1e09fda28ccfd04559a07c1c25863fa412a1f5eb340183f3983ca763930ce15f80d3fcacf1f3b63ac1b52169c6fb213cd805fe341bcc1

    • SSDEEP

      6144:8YLVRAw0c6P4BR3yfsPElkUhRvyzKDOHPhkL+Vl7l:3xt0dP1fsTUhJyzpvhk6X

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks