General

  • Target

    cd506d1000a36f3dc87afd8c66c4b2cf89ad21a8ce600aeeada2b83c02eb17fb

  • Size

    425KB

  • Sample

    241111-ce8dzsyrdx

  • MD5

    94b4c79edc82ac8383c7b14832609584

  • SHA1

    4c0c19b4c7d9d7e7e10ed90bd3fae87b93975989

  • SHA256

    cd506d1000a36f3dc87afd8c66c4b2cf89ad21a8ce600aeeada2b83c02eb17fb

  • SHA512

    f292fed94e86aa09f4bb7cc6f1119ed58711fccb8586b38df8e3aefe1e007d595f8e1cff07bf231462b78ec70a0c92bb0269777c5f628ea9efcd429b22f6bf4f

  • SSDEEP

    6144:ZhEhUR7NXRNcctWZzL2SeCi+AkDG/Jl7kP6YYUayvLHHZlofiDP9LtQtyfWJ:ZhEhQ1MLm+ANxl7kP6YYUDvLXoEVLOy

Malware Config

Extracted

Family

redline

Botnet

bbtt1

C2

212.193.30.196:13040

Attributes
  • auth_value

    fd6c3db35926ff1b33d500d0fb0ce060

Targets

    • Target

      cd506d1000a36f3dc87afd8c66c4b2cf89ad21a8ce600aeeada2b83c02eb17fb

    • Size

      425KB

    • MD5

      94b4c79edc82ac8383c7b14832609584

    • SHA1

      4c0c19b4c7d9d7e7e10ed90bd3fae87b93975989

    • SHA256

      cd506d1000a36f3dc87afd8c66c4b2cf89ad21a8ce600aeeada2b83c02eb17fb

    • SHA512

      f292fed94e86aa09f4bb7cc6f1119ed58711fccb8586b38df8e3aefe1e007d595f8e1cff07bf231462b78ec70a0c92bb0269777c5f628ea9efcd429b22f6bf4f

    • SSDEEP

      6144:ZhEhUR7NXRNcctWZzL2SeCi+AkDG/Jl7kP6YYUayvLHHZlofiDP9LtQtyfWJ:ZhEhQ1MLm+ANxl7kP6YYUDvLXoEVLOy

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks