General

  • Target

    779f09cb61a0e7e641b7184077703c7f

  • Size

    192KB

  • Sample

    241111-bc4gksskhm

  • MD5

    779f09cb61a0e7e641b7184077703c7f

  • SHA1

    94138dcf74470b62c6d97a8c851a50f66949327c

  • SHA256

    75ec1b6210bdb1589e5515d00626cf3167281d4f4bc3e8e6025202b6241ceea7

  • SHA512

    e2788c1f99566c06c95d4d089195b9737bcd675a3903f2579dd1c6ba5e13056d191fac24d0d76a3ff8ee8a703238e5eb046a192682212d73d454b74f0d91a34c

  • SSDEEP

    3072:q4Gtnu+B/1qBZRrcIMNqd7NMaJ6mfr8lmWAY7E/oTke5swK1qudgVuZkd:+9cRoPcNMaJ6E+

Malware Config

Extracted

Family

redline

Botnet

healthy

C2

185.237.15.245:2802

Attributes
  • auth_value

    a899dcff38c6c39305d003ed128c4131

Targets

    • Target

      779f09cb61a0e7e641b7184077703c7f

    • Size

      192KB

    • MD5

      779f09cb61a0e7e641b7184077703c7f

    • SHA1

      94138dcf74470b62c6d97a8c851a50f66949327c

    • SHA256

      75ec1b6210bdb1589e5515d00626cf3167281d4f4bc3e8e6025202b6241ceea7

    • SHA512

      e2788c1f99566c06c95d4d089195b9737bcd675a3903f2579dd1c6ba5e13056d191fac24d0d76a3ff8ee8a703238e5eb046a192682212d73d454b74f0d91a34c

    • SSDEEP

      3072:q4Gtnu+B/1qBZRrcIMNqd7NMaJ6mfr8lmWAY7E/oTke5swK1qudgVuZkd:+9cRoPcNMaJ6E+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks