General

  • Target

    073cf98eb4696aff77c2c98a53be1c3785c251ff5348c9cba2115115725a9133

  • Size

    254KB

  • Sample

    241111-bqe15syhkk

  • MD5

    8c7dcf94151b735c5338418acc1387b5

  • SHA1

    77c377a48eef860f12f887f33b50b110ccf9d189

  • SHA256

    073cf98eb4696aff77c2c98a53be1c3785c251ff5348c9cba2115115725a9133

  • SHA512

    83f1112c899e0f78b02e2ed75bced0d27bb2c84ee1d5595a5d60497370f9abb25b40ada4bf9a38e2667781789fafac4717277e75f10d5293f21662a9b3fbd32d

  • SSDEEP

    6144:pAvFZxDdhPydWN8UjUtklNkcCX0LoLw1jSCVh4gTMhfc844zm:pAtZbhqdY8UjUtklK5ELqOnVOEx84B

Malware Config

Extracted

Family

redline

Botnet

@2023@New

C2

91.215.85.155:32796

Attributes
  • auth_value

    0be5b9b84cd5b707e91a48e341e3f7d7

Targets

    • Target

      1f268e5c105e74306fea411762772e2407917eb73acb6a05a5f989ff025d9cdc

    • Size

      330KB

    • MD5

      38da99b57d025954df7653912543b1be

    • SHA1

      6421f1abd8a3f5364aa70591bcd9dbefa94df2ce

    • SHA256

      1f268e5c105e74306fea411762772e2407917eb73acb6a05a5f989ff025d9cdc

    • SHA512

      5bf0c29d03ba35ab2984b774decf0d4252fd4b14964fdfc974fca4e84f971af3ec7233e27312df62e73f04afec0016fb9085cf90505006e46e1006c2cc997938

    • SSDEEP

      6144:fHONMEWkwKN8UjUjklNkcCX0LoNw1jSCVt4gpaWdlAS:fONlwU8UjUjklK5ELOOnVylWdl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks