General

  • Target

    2b8de63efc73f6f90b4eba5b5ebf8e23

  • Size

    325KB

  • Sample

    241111-c1w8vatpfm

  • MD5

    2b8de63efc73f6f90b4eba5b5ebf8e23

  • SHA1

    9cc420b9269bd8f652c883b1728cc046a3d1ce57

  • SHA256

    635d7344172e638eb39201f53f7dcb1c0781dff718425b59913323488b7d39ed

  • SHA512

    aadbf291e79a15172d44bfb6d59ebbcd833672ed5a5b3b18c9c8507aa95dd7901201599a2a7bf7d92194daf3a2762939e3d266fc148c01765322ebbd25f7842d

  • SSDEEP

    6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

Malware Config

Extracted

Family

redline

Botnet

TripleSBanks

C2

185.143.223.90:10024

Attributes
  • auth_value

    064872fe393e6f3a6d60eca59269d528

Targets

    • Target

      2b8de63efc73f6f90b4eba5b5ebf8e23

    • Size

      325KB

    • MD5

      2b8de63efc73f6f90b4eba5b5ebf8e23

    • SHA1

      9cc420b9269bd8f652c883b1728cc046a3d1ce57

    • SHA256

      635d7344172e638eb39201f53f7dcb1c0781dff718425b59913323488b7d39ed

    • SHA512

      aadbf291e79a15172d44bfb6d59ebbcd833672ed5a5b3b18c9c8507aa95dd7901201599a2a7bf7d92194daf3a2762939e3d266fc148c01765322ebbd25f7842d

    • SSDEEP

      6144:4kQuOSvy0tyg9E4rCRf9DX6E0ZYYIvNyEm8N:49uOSvy+RC+EOxIvgEm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks