General

  • Target

    332c9c659fd4036e2ee204bdfd1af859dd65f23ed8f439810afbfd510ebc8574

  • Size

    407KB

  • Sample

    241111-bqsl8ssnbj

  • MD5

    5cbabef81763056f09a12b3ba1b00afe

  • SHA1

    4e0a67ad8230acdd5b7a6692f2b4a30340937837

  • SHA256

    332c9c659fd4036e2ee204bdfd1af859dd65f23ed8f439810afbfd510ebc8574

  • SHA512

    bd3c005e17d94a2cbed5d4db591d2dbc8e95aea5e89368b7bf5d5933e37900a61e1d7bc1d206579430d2da91d4d87ed16aa82d07d6f6160b916706034ff603ed

  • SSDEEP

    12288:lzUYiYOsN7Voz7Nhlg5dg/zP7NOuefZtFc+b:WsNiH4gbP7NOVtFcu

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      332c9c659fd4036e2ee204bdfd1af859dd65f23ed8f439810afbfd510ebc8574

    • Size

      407KB

    • MD5

      5cbabef81763056f09a12b3ba1b00afe

    • SHA1

      4e0a67ad8230acdd5b7a6692f2b4a30340937837

    • SHA256

      332c9c659fd4036e2ee204bdfd1af859dd65f23ed8f439810afbfd510ebc8574

    • SHA512

      bd3c005e17d94a2cbed5d4db591d2dbc8e95aea5e89368b7bf5d5933e37900a61e1d7bc1d206579430d2da91d4d87ed16aa82d07d6f6160b916706034ff603ed

    • SSDEEP

      12288:lzUYiYOsN7Voz7Nhlg5dg/zP7NOuefZtFc+b:WsNiH4gbP7NOVtFcu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks