General

  • Target

    23f0de39bbc0f4aaea331c6618f422c3

  • Size

    407KB

  • Sample

    241111-cqal4a1bjf

  • MD5

    23f0de39bbc0f4aaea331c6618f422c3

  • SHA1

    e6708aef54e1d7353151cceca8fbf380c4794f27

  • SHA256

    00b1d6e7b504cf560c02e2dd50aa0e2930316f677ea12b21c8d9cacc6622cd92

  • SHA512

    7aea0c42ce63ec1e0b9593c4c5c05770e773e715983d836b5803b13e0ee55f668345e3541f75c35371de0552ec7314f4b6d4d6e8178f6027ca0bf5fcbe5b131f

  • SSDEEP

    12288:Mz/G7MTsPu4K4agKj2wVomkFhGp9/4v6KEwYF2:ysPedSNmQG/4bNYc

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      23f0de39bbc0f4aaea331c6618f422c3

    • Size

      407KB

    • MD5

      23f0de39bbc0f4aaea331c6618f422c3

    • SHA1

      e6708aef54e1d7353151cceca8fbf380c4794f27

    • SHA256

      00b1d6e7b504cf560c02e2dd50aa0e2930316f677ea12b21c8d9cacc6622cd92

    • SHA512

      7aea0c42ce63ec1e0b9593c4c5c05770e773e715983d836b5803b13e0ee55f668345e3541f75c35371de0552ec7314f4b6d4d6e8178f6027ca0bf5fcbe5b131f

    • SSDEEP

      12288:Mz/G7MTsPu4K4agKj2wVomkFhGp9/4v6KEwYF2:ysPedSNmQG/4bNYc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks