General

  • Target

    e4131debd3fa0151885677f579a3b38a9407fbc9a4c5db6be87835008eb2c45c

  • Size

    373KB

  • Sample

    241111-cb1vqszdlk

  • MD5

    0aa3f9217c48aae7eca26a15653d1e6f

  • SHA1

    447db34f40785f7b02ead451187f01e244547c3c

  • SHA256

    e4131debd3fa0151885677f579a3b38a9407fbc9a4c5db6be87835008eb2c45c

  • SHA512

    9e540ad24288c93ecbc1b65b462102e62bfe9e46af4863d1586b6d10a8881fee1911dee93981e4812047b1a1e074c3c62afd49d1d99e523cd29f58eb5b138c8e

  • SSDEEP

    3072:4ibEgkdGKxWR2VbM9eomnk9pi+D/OmlZI5Mf1gcE71zoVE0a7LgHjO5WsqnZg2:JEgucR2Z+eK9Q+D/XI5V1BKjB7nx

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      e4131debd3fa0151885677f579a3b38a9407fbc9a4c5db6be87835008eb2c45c

    • Size

      373KB

    • MD5

      0aa3f9217c48aae7eca26a15653d1e6f

    • SHA1

      447db34f40785f7b02ead451187f01e244547c3c

    • SHA256

      e4131debd3fa0151885677f579a3b38a9407fbc9a4c5db6be87835008eb2c45c

    • SHA512

      9e540ad24288c93ecbc1b65b462102e62bfe9e46af4863d1586b6d10a8881fee1911dee93981e4812047b1a1e074c3c62afd49d1d99e523cd29f58eb5b138c8e

    • SSDEEP

      3072:4ibEgkdGKxWR2VbM9eomnk9pi+D/OmlZI5Mf1gcE71zoVE0a7LgHjO5WsqnZg2:JEgucR2Z+eK9Q+D/XI5V1BKjB7nx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks