General

  • Target

    9701830fc52958002ec355e6493830e56729edb9

  • Size

    415KB

  • Sample

    241111-cntbes1aqe

  • MD5

    20fd6b9c1ddf425021b2d9f4ea63b1a3

  • SHA1

    9701830fc52958002ec355e6493830e56729edb9

  • SHA256

    9d6ee8449d75975fcdeaba98d32f000fe6d97b72306c4b9943d31bffd7fc2f31

  • SHA512

    008e0d3b953621d5d1160adcef2a458fe72a3707cc7724c860f58b1b9f97433247525653ac06372c53f51a0f0e28cb5fbe632bbaa02726a9cb15a569e25227d1

  • SSDEEP

    12288:wXH1ROwdXI9Aariu0wldjGO47L+e6G4YV/W6bXfjHVHg7H:HuX6iQjSj/0DIeqy

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      9701830fc52958002ec355e6493830e56729edb9

    • Size

      415KB

    • MD5

      20fd6b9c1ddf425021b2d9f4ea63b1a3

    • SHA1

      9701830fc52958002ec355e6493830e56729edb9

    • SHA256

      9d6ee8449d75975fcdeaba98d32f000fe6d97b72306c4b9943d31bffd7fc2f31

    • SHA512

      008e0d3b953621d5d1160adcef2a458fe72a3707cc7724c860f58b1b9f97433247525653ac06372c53f51a0f0e28cb5fbe632bbaa02726a9cb15a569e25227d1

    • SSDEEP

      12288:wXH1ROwdXI9Aariu0wldjGO47L+e6G4YV/W6bXfjHVHg7H:HuX6iQjSj/0DIeqy

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks