General

  • Target

    73ad3580e4900188185a5ac2ec94b2aee579769c4939282ae6557bf3c7959710

  • Size

    59KB

  • Sample

    241111-b5hetazfje

  • MD5

    c86199a5134328f0134ce421baa492c2

  • SHA1

    9988b07bdaa6030214a902e799c430a0fffe2e46

  • SHA256

    73ad3580e4900188185a5ac2ec94b2aee579769c4939282ae6557bf3c7959710

  • SHA512

    54a9e85733c50526a92382d5c6de761149dfd40a467d9d9d92220b521d950644d6bdfc82a9e65bb7b81d6200805d1c24f866f62f131aad8aecc848361ece094c

  • SSDEEP

    1536:BIXOjoV3tHS/E0J2c3ORy6OsdKfNuCg9F1Yuz:cOjCHS/E0j3Ooxlfovj

Malware Config

Extracted

Family

redline

Botnet

already

C2

192.3.110.135:22314

Attributes
  • auth_value

    ded20299ff3483261f66fc9e17a8056f

Targets

    • Target

      3b5eeed395e55b307e7d51a806b3310ec5f692e8c2751d3bbc85dd6cbcb374c6

    • Size

      137KB

    • MD5

      eeaf0a240ad75cdc42d98493752d61ec

    • SHA1

      0dd6c5ae9fa983abc9d2276a54c489eaee8e6ec0

    • SHA256

      3b5eeed395e55b307e7d51a806b3310ec5f692e8c2751d3bbc85dd6cbcb374c6

    • SHA512

      985156b11a9fa82a9537eabd54b82493570e4391ab7d965f109a68a0182cfb3754487841107c68936bb57038abaaa57aa67ae466aaf9d309450978e9a612687e

    • SSDEEP

      3072:XYO/ZMTF9J+0oA7hZBkVztwsCWFoy2X/hTSS8A:XYMZMB9JvoKMFCwW/h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks