General

  • Target

    40f09c0db194b695f62eac9880860099b3657f0b229a9c8ed5b23125a03ded42

  • Size

    50KB

  • Sample

    241111-cq7ltszgjm

  • MD5

    ebe75c220c7377d2facd21a48dfbdd43

  • SHA1

    2d7a3a9ad7aec1909022a0e6bc3ce5cbff9aac96

  • SHA256

    40f09c0db194b695f62eac9880860099b3657f0b229a9c8ed5b23125a03ded42

  • SHA512

    52f3aba7b7403d6ebd9ddbfd6e7268ea89c6a6bf4b7fe3f0d9c7850425a05ce7f63aaeadb7f72a06b9e3eb6dda253b573123f4469c981518476d4cdb2607bcca

  • SSDEEP

    1536:1F5xGGHW+5XV17pTHUG7VqXDtgPsYOtAf:H5xGf+5F1pH77VqaPsjs

Malware Config

Extracted

Family

redline

Botnet

Mine

C2

31.41.244.186:4683

Attributes
  • auth_value

    1b1e48ccc6e0797e3ac231cfeb9919b9

Targets

    • Target

      9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c

    • Size

      175KB

    • MD5

      0e068405ce30f54e043ab2c3841efe78

    • SHA1

      74cc1bcda934bdc8c406cb5d126917d559b15bf6

    • SHA256

      9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c

    • SHA512

      0cb861ade2f50f3380b7b66ea62acf4a37c76e09360311a969db20cfa46890a968a6420304ef7853a1174b39c979a1ed431d62ad35217c06a3635eff3d36bdea

    • SSDEEP

      3072:vxqZWJBaKULo37yEWGljSesSFIhYvTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0k:ZqZI7yEWY3Ihy

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks