General

  • Target

    a26c4dbad3299838921edb8af588cf43af4113c1

  • Size

    373KB

  • Sample

    241111-cclr7syqg1

  • MD5

    d5f1291c35c13fffd67f3b066edecbfc

  • SHA1

    a26c4dbad3299838921edb8af588cf43af4113c1

  • SHA256

    b05e677d3838656d62955d80131d35afd4327d53d4153e868c123c6b20f6a895

  • SHA512

    a3501314fe80ecf7858483a27a5997201ee02275f27352c2753501a1422d31fe2c4fbaa13aa9720765bfcdb1ae9a483623c43f8ed7412019967b8518fcb57271

  • SSDEEP

    3072:4ibEgkdGKxWR2VbM9eomnk9pi+D/OmlZI5Mf1gcE71zoVE0a7LgHjO5WsqnZg2:JEgucR2Z+eK9Q+D/XI5V1BKjB7nx

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      a26c4dbad3299838921edb8af588cf43af4113c1

    • Size

      373KB

    • MD5

      d5f1291c35c13fffd67f3b066edecbfc

    • SHA1

      a26c4dbad3299838921edb8af588cf43af4113c1

    • SHA256

      b05e677d3838656d62955d80131d35afd4327d53d4153e868c123c6b20f6a895

    • SHA512

      a3501314fe80ecf7858483a27a5997201ee02275f27352c2753501a1422d31fe2c4fbaa13aa9720765bfcdb1ae9a483623c43f8ed7412019967b8518fcb57271

    • SSDEEP

      3072:4ibEgkdGKxWR2VbM9eomnk9pi+D/OmlZI5Mf1gcE71zoVE0a7LgHjO5WsqnZg2:JEgucR2Z+eK9Q+D/XI5V1BKjB7nx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks