General

  • Target

    046830a0f8d78abce1e613c22497d5f0

  • Size

    407KB

  • Sample

    241111-calpeszgjd

  • MD5

    046830a0f8d78abce1e613c22497d5f0

  • SHA1

    3cd7ae2b30a16e23c29f1335ae6d87494eca129e

  • SHA256

    38c6f9789e653883f8cf13b05556e5259eeacc6b599c552812b3bd239020d667

  • SHA512

    cf91acafe70d3dcf91d191404a236b2c42cfb6933813c0184765e98b4e2ed54c2e06139ba356c6eddbdcbe1d7f3a3be60a5511b936bc5d7bfeeab297a758fc73

  • SSDEEP

    12288:t6PhF7P07sYCWyKrdsHVHBQwT2f2+m6ERNP:407sYz/MhQwibEj

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      046830a0f8d78abce1e613c22497d5f0

    • Size

      407KB

    • MD5

      046830a0f8d78abce1e613c22497d5f0

    • SHA1

      3cd7ae2b30a16e23c29f1335ae6d87494eca129e

    • SHA256

      38c6f9789e653883f8cf13b05556e5259eeacc6b599c552812b3bd239020d667

    • SHA512

      cf91acafe70d3dcf91d191404a236b2c42cfb6933813c0184765e98b4e2ed54c2e06139ba356c6eddbdcbe1d7f3a3be60a5511b936bc5d7bfeeab297a758fc73

    • SSDEEP

      12288:t6PhF7P07sYCWyKrdsHVHBQwT2f2+m6ERNP:407sYz/MhQwibEj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks