General

  • Target

    b8c27f70f4e5ff07292627871b9e390fe01edc25600ab949bea05f5365309adb

  • Size

    295KB

  • Sample

    241111-c5ngha1ejg

  • MD5

    e3b52c836ae14eb6f03690b35e6c4222

  • SHA1

    4645f039dc3c0192bf718e4496a2abe282dceacf

  • SHA256

    b8c27f70f4e5ff07292627871b9e390fe01edc25600ab949bea05f5365309adb

  • SHA512

    9b68a4766d29477aa0e1ef0fe08f9dc8a1a1e2aa648c48fb1da96ae8702478d2709e6a1d6cda0d4ba093bdef6ff0f48501a518fea31d3cc02b290c8dda4cf2ac

  • SSDEEP

    6144:h9rrH1JfCBzZ632jmdmJxexjoFxe7H+yhwUz7u:zrrHXqBzZ632i6xexye7H

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      b8c27f70f4e5ff07292627871b9e390fe01edc25600ab949bea05f5365309adb

    • Size

      295KB

    • MD5

      e3b52c836ae14eb6f03690b35e6c4222

    • SHA1

      4645f039dc3c0192bf718e4496a2abe282dceacf

    • SHA256

      b8c27f70f4e5ff07292627871b9e390fe01edc25600ab949bea05f5365309adb

    • SHA512

      9b68a4766d29477aa0e1ef0fe08f9dc8a1a1e2aa648c48fb1da96ae8702478d2709e6a1d6cda0d4ba093bdef6ff0f48501a518fea31d3cc02b290c8dda4cf2ac

    • SSDEEP

      6144:h9rrH1JfCBzZ632jmdmJxexjoFxe7H+yhwUz7u:zrrHXqBzZ632i6xexye7H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks