General

  • Target

    c722383298bca31bff71da4c7bb69f0e

  • Size

    449KB

  • Sample

    241111-c2xwrszmhw

  • MD5

    c722383298bca31bff71da4c7bb69f0e

  • SHA1

    8227952ed2d4ab0b9fd54a26d0f1ad71681fb3a5

  • SHA256

    079e0f192d1683e2d01ceeb4c3b234e8b0b19f8f8b9ef46a29812d4248bb8dba

  • SHA512

    9615738e0c1cefc24a7fc913c4484792e926d3c74e2898263fdb54b8104f3844b0ffe8dafe2595c0724c82a83c569b6ec876b9cc410aa37c301bea767ddeab6c

  • SSDEEP

    12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      c722383298bca31bff71da4c7bb69f0e

    • Size

      449KB

    • MD5

      c722383298bca31bff71da4c7bb69f0e

    • SHA1

      8227952ed2d4ab0b9fd54a26d0f1ad71681fb3a5

    • SHA256

      079e0f192d1683e2d01ceeb4c3b234e8b0b19f8f8b9ef46a29812d4248bb8dba

    • SHA512

      9615738e0c1cefc24a7fc913c4484792e926d3c74e2898263fdb54b8104f3844b0ffe8dafe2595c0724c82a83c569b6ec876b9cc410aa37c301bea767ddeab6c

    • SSDEEP

      12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks