General

  • Target

    afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12.exe

  • Size

    370KB

  • Sample

    241111-c53anaznfz

  • MD5

    176dffce379eb75cb0bc46b86733784a

  • SHA1

    d56563f5e24b6851cb1a2aa24b99f33b5ebb8bd1

  • SHA256

    afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12

  • SHA512

    f821e78390492929166dddc95562136dba243b9158bfc43b3c6210b828247cf63473f8ad6167d8b522c090ee5b2efa1e69bf275c22a4d67d886b301ca68915fa

  • SSDEEP

    6144:vZp0yN90QEEmKItMqxYrC7XY+1B7Tzi3pSH92wLPFTXjxAGA:My90+SSEXE+1B+pjwLwGA

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12.exe

    • Size

      370KB

    • MD5

      176dffce379eb75cb0bc46b86733784a

    • SHA1

      d56563f5e24b6851cb1a2aa24b99f33b5ebb8bd1

    • SHA256

      afb045d60e501fce08a942a03e072c6d701a49ce0cb4c813f59e450a8a726b12

    • SHA512

      f821e78390492929166dddc95562136dba243b9158bfc43b3c6210b828247cf63473f8ad6167d8b522c090ee5b2efa1e69bf275c22a4d67d886b301ca68915fa

    • SSDEEP

      6144:vZp0yN90QEEmKItMqxYrC7XY+1B7Tzi3pSH92wLPFTXjxAGA:My90+SSEXE+1B+pjwLwGA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks