General

  • Target

    056abf08a5b5dd6eed9f7e231c1d6572ed4250a0

  • Size

    234KB

  • Sample

    241111-cj3z3azeqq

  • MD5

    b873b6b78ed886aa2fda01dc753aace8

  • SHA1

    056abf08a5b5dd6eed9f7e231c1d6572ed4250a0

  • SHA256

    9e432afbb2cc1a9c97af774dbc9cbd88028958ff9ba2653e64b33d90402ddaf5

  • SHA512

    6fb46ec67a1b6b4813978556af461d0e35bd72dc981a54f737c54504b4e2bfe2d500320877f12e206c9daf6cf53672e62d1f52c1edc6de708ab8b9ed1b0c6124

  • SSDEEP

    3072:xc/FTczvVqWToA8uvAqadRbFdYYxywoJK1gFHfq3Q2fJWqfYEybNe0IjPafCXyB4:OF4z7E6vAqe5sb/q53f3ybjAfs4

Malware Config

Extracted

Family

redline

Botnet

20220825

C2

80.87.192.249:16640

Attributes
  • auth_value

    27aa40395151b318c78ecf2834d1a5a0

Targets

    • Target

      4cfd90287cd741b19b84716e7293a92f2b688dc03bf2ab1e2b16c1fd8684e106

    • Size

      405KB

    • MD5

      cd77114ce2e2e7698190af80646196ab

    • SHA1

      89f0988f45b435766aaf553e73ba205753c2e1ac

    • SHA256

      4cfd90287cd741b19b84716e7293a92f2b688dc03bf2ab1e2b16c1fd8684e106

    • SHA512

      ee102de20bec975f195a450f136ead4c3ee171f7a9ff96c92880c2f2057632b5f985441d3efc1e308272929205f30c7c085c3a5bef1ca682dc1110d4ad1a3907

    • SSDEEP

      6144:1SLkoI/0SlyTkXFWOkXgT/ZvljlREmlXbiQF7ot1XXPvF:1SYoI/FtW/QT/NlBRz517oPPN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks