General

  • Target

    d6b9fc32d9ff08af902b8868c3472c780cff3b41f2fdc1e31d1b6af93c15be77

  • Size

    407KB

  • Sample

    241111-c9g6aa1cnk

  • MD5

    9a5c02b43fd842cb08bf50c700d752fc

  • SHA1

    e0b8d6e86740c9dc0ce8937ef523e7b885985de6

  • SHA256

    d6b9fc32d9ff08af902b8868c3472c780cff3b41f2fdc1e31d1b6af93c15be77

  • SHA512

    2058057ca3b1f416acde999cb10f5363b067d021dd8773a83e14a3930e824cb0f3f742c345bb353ca052e2296ea40d4847ff4bcfe9980285ed4d9e3e45a02b3a

  • SSDEEP

    12288:MvN/0O4n+iLxnFs0NMOQ/Au1ngdRx3lq3q:A4n+i1yXO2lgTx3l

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      d6b9fc32d9ff08af902b8868c3472c780cff3b41f2fdc1e31d1b6af93c15be77

    • Size

      407KB

    • MD5

      9a5c02b43fd842cb08bf50c700d752fc

    • SHA1

      e0b8d6e86740c9dc0ce8937ef523e7b885985de6

    • SHA256

      d6b9fc32d9ff08af902b8868c3472c780cff3b41f2fdc1e31d1b6af93c15be77

    • SHA512

      2058057ca3b1f416acde999cb10f5363b067d021dd8773a83e14a3930e824cb0f3f742c345bb353ca052e2296ea40d4847ff4bcfe9980285ed4d9e3e45a02b3a

    • SSDEEP

      12288:MvN/0O4n+iLxnFs0NMOQ/Au1ngdRx3lq3q:A4n+i1yXO2lgTx3l

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks