General

  • Target

    5d2c62967fe9728d1b365d9959e287730ccc606a2f7b3d1afc394364544118daN

  • Size

    379KB

  • Sample

    241111-b44xessqhp

  • MD5

    712166de3ce29b8c9fd687428021b000

  • SHA1

    c0b8f60a250feb5d432d93b41419d939df40e205

  • SHA256

    5d2c62967fe9728d1b365d9959e287730ccc606a2f7b3d1afc394364544118da

  • SHA512

    94f1e4c95fcf74ac5e03e0a627419a4dccbe5b8d182d1a38452483f2ecc1cd9d07f34144b55f1b83de866b79a2a17c6eb59cd334b1ee70b42a0a027b3979860b

  • SSDEEP

    6144:OBYRDyHfg9YsVUDqXnIfe0TCwbu4WWvT2M:OBYRDy/gbUqj4CWqM

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      5d2c62967fe9728d1b365d9959e287730ccc606a2f7b3d1afc394364544118daN

    • Size

      379KB

    • MD5

      712166de3ce29b8c9fd687428021b000

    • SHA1

      c0b8f60a250feb5d432d93b41419d939df40e205

    • SHA256

      5d2c62967fe9728d1b365d9959e287730ccc606a2f7b3d1afc394364544118da

    • SHA512

      94f1e4c95fcf74ac5e03e0a627419a4dccbe5b8d182d1a38452483f2ecc1cd9d07f34144b55f1b83de866b79a2a17c6eb59cd334b1ee70b42a0a027b3979860b

    • SSDEEP

      6144:OBYRDyHfg9YsVUDqXnIfe0TCwbu4WWvT2M:OBYRDy/gbUqj4CWqM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks