General

  • Target

    1c148f59bb2317edf83862a9afdb09c1

  • Size

    365KB

  • Sample

    241111-c1v1satpfl

  • MD5

    1c148f59bb2317edf83862a9afdb09c1

  • SHA1

    d1c39046f972d1f73802e2c9725e9fa4f0aa4c01

  • SHA256

    f7723da0ee9c6f66996e10c00657c028a10233be902d0102e3984d8d74f44f2e

  • SHA512

    f6d560c0ec0cf308fb23355f02871bac801f19f9c2152a337cb7df40d286b57c41560e0b674624cfd3978df0e3ed8ce4d047cb491dc3eeead72f1a722cbfc6f1

  • SSDEEP

    6144:5Liw0UdqO2WJlXSQTXu4LxY8K+UFno6dl8/nk2o6qut7Vs3si7v:Ni+dqO2WJlXSTqUPQalmu3t

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      1c148f59bb2317edf83862a9afdb09c1

    • Size

      365KB

    • MD5

      1c148f59bb2317edf83862a9afdb09c1

    • SHA1

      d1c39046f972d1f73802e2c9725e9fa4f0aa4c01

    • SHA256

      f7723da0ee9c6f66996e10c00657c028a10233be902d0102e3984d8d74f44f2e

    • SHA512

      f6d560c0ec0cf308fb23355f02871bac801f19f9c2152a337cb7df40d286b57c41560e0b674624cfd3978df0e3ed8ce4d047cb491dc3eeead72f1a722cbfc6f1

    • SSDEEP

      6144:5Liw0UdqO2WJlXSQTXu4LxY8K+UFno6dl8/nk2o6qut7Vs3si7v:Ni+dqO2WJlXSTqUPQalmu3t

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks