General

  • Target

    b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550

  • Size

    358KB

  • Sample

    241111-c26hxa1arr

  • MD5

    fd3e76a9ee1eb5acc1c8e18d473377fb

  • SHA1

    c6da1d47d2dddd6c220427ef29e5cdbd1d568014

  • SHA256

    b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550

  • SHA512

    1eade06f6a34d8885221780a7ef4196864acf6d79ed63d28f506c7570096bc3bdd45b21d3b09c729c30fa092231d82bfdc39a45c254519effbd00fb7129ea7f5

  • SSDEEP

    6144:d3jStS8NSSwMnOV5UsFkEtaBAxHh0HmPDqGab6igbC4JD:dSo8NSPMnM5UjNBAD0Gb9amiaD

Malware Config

Extracted

Family

redline

Botnet

down

C2

193.233.20.31:4125

Attributes
  • auth_value

    12c31a90c72f5efae8c053a0bd339381

Targets

    • Target

      b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550

    • Size

      358KB

    • MD5

      fd3e76a9ee1eb5acc1c8e18d473377fb

    • SHA1

      c6da1d47d2dddd6c220427ef29e5cdbd1d568014

    • SHA256

      b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550

    • SHA512

      1eade06f6a34d8885221780a7ef4196864acf6d79ed63d28f506c7570096bc3bdd45b21d3b09c729c30fa092231d82bfdc39a45c254519effbd00fb7129ea7f5

    • SSDEEP

      6144:d3jStS8NSSwMnOV5UsFkEtaBAxHh0HmPDqGab6igbC4JD:dSo8NSPMnM5UjNBAD0Gb9amiaD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks