General

  • Target

    02313aa8cbaebdc3ee222f545c12689dbdf0e876

  • Size

    373KB

  • Sample

    241111-c8henazpc1

  • MD5

    58265c6efb3435d0ada9c19f1b143f1b

  • SHA1

    02313aa8cbaebdc3ee222f545c12689dbdf0e876

  • SHA256

    fbe5cda491bad424fa3b1a530c7e14e8f15eb4e9f2c2e32b8dcdf9630885a823

  • SHA512

    b6e5b75ae78398e35e285f05ad5999bd4eed310c525b8f6780e878b52a0a10b00003ada1d582d42c3cc2a9824cafeef3af211bbefb0aef7821fa3a6ebabf2d19

  • SSDEEP

    3072:3tvcRIs8saBM8eQTDb2Oj+kNFXvJlWODwuGEEbOkbFYQWL3uQ10Xg6zg5hh2B:NcRITbBscpFfn5DwuGQXTEgK4Q

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      02313aa8cbaebdc3ee222f545c12689dbdf0e876

    • Size

      373KB

    • MD5

      58265c6efb3435d0ada9c19f1b143f1b

    • SHA1

      02313aa8cbaebdc3ee222f545c12689dbdf0e876

    • SHA256

      fbe5cda491bad424fa3b1a530c7e14e8f15eb4e9f2c2e32b8dcdf9630885a823

    • SHA512

      b6e5b75ae78398e35e285f05ad5999bd4eed310c525b8f6780e878b52a0a10b00003ada1d582d42c3cc2a9824cafeef3af211bbefb0aef7821fa3a6ebabf2d19

    • SSDEEP

      3072:3tvcRIs8saBM8eQTDb2Oj+kNFXvJlWODwuGEEbOkbFYQWL3uQ10Xg6zg5hh2B:NcRITbBscpFfn5DwuGQXTEgK4Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks