General

  • Target

    6080fea9967b5f9c35d6e4a808256391ec44fa475219c8976fd5f81d89069419

  • Size

    372KB

  • Sample

    241111-cteefszgpm

  • MD5

    145a7689a830bc0cfc11cdc41e24e2ad

  • SHA1

    29f3f89d711b22ba650e09448d791f10f188c4ad

  • SHA256

    6080fea9967b5f9c35d6e4a808256391ec44fa475219c8976fd5f81d89069419

  • SHA512

    c5617b35c038a2f53786bd3b30b7aa0e6206a1cbd83160c03aa396bf61f0e3cf9861e01282ee487f0f881042bfe0805c206ac9cab3e6997af46ff4883976cc45

  • SSDEEP

    3072:IEDcK6kemaIj8h8qXa5FZwC19bFYo5ijh93MoZPrE3gnbOyJwWof975Z342B:XcKraIy8qqLZ3LYsv0Ww56fxD

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      6080fea9967b5f9c35d6e4a808256391ec44fa475219c8976fd5f81d89069419

    • Size

      372KB

    • MD5

      145a7689a830bc0cfc11cdc41e24e2ad

    • SHA1

      29f3f89d711b22ba650e09448d791f10f188c4ad

    • SHA256

      6080fea9967b5f9c35d6e4a808256391ec44fa475219c8976fd5f81d89069419

    • SHA512

      c5617b35c038a2f53786bd3b30b7aa0e6206a1cbd83160c03aa396bf61f0e3cf9861e01282ee487f0f881042bfe0805c206ac9cab3e6997af46ff4883976cc45

    • SSDEEP

      3072:IEDcK6kemaIj8h8qXa5FZwC19bFYo5ijh93MoZPrE3gnbOyJwWof975Z342B:XcKraIy8qqLZ3LYsv0Ww56fxD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks