General

  • Target

    44a02f3039ad002817bc142eb192cc6a7dab4afd

  • Size

    373KB

  • Sample

    241111-byq4daspgm

  • MD5

    ee879af679e8bf06d84cf6802c1760f8

  • SHA1

    44a02f3039ad002817bc142eb192cc6a7dab4afd

  • SHA256

    784f5ed8ae38de4e002e3c3791fbb11990f00f1339ea80fe56758002f2b12919

  • SHA512

    02185bc9ca1fef2e743d8544a1b82c966c67bbc5742099d7bafa882a99687db1575d5eee55a8932a15ad45b5d83e6da15059a112a2dbffcd1eceaaba6636a422

  • SSDEEP

    6144:sQbYaHTyC3lD/ZQYHLcoO8xtTUXiNzUZBQKW:BbYaH2+NLU8xhciBc

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      44a02f3039ad002817bc142eb192cc6a7dab4afd

    • Size

      373KB

    • MD5

      ee879af679e8bf06d84cf6802c1760f8

    • SHA1

      44a02f3039ad002817bc142eb192cc6a7dab4afd

    • SHA256

      784f5ed8ae38de4e002e3c3791fbb11990f00f1339ea80fe56758002f2b12919

    • SHA512

      02185bc9ca1fef2e743d8544a1b82c966c67bbc5742099d7bafa882a99687db1575d5eee55a8932a15ad45b5d83e6da15059a112a2dbffcd1eceaaba6636a422

    • SSDEEP

      6144:sQbYaHTyC3lD/ZQYHLcoO8xtTUXiNzUZBQKW:BbYaH2+NLU8xhciBc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks