General

  • Target

    b5813d6b0ff1b99582c79224a89fbf1e9d4aec1cfc47dadc54fc1f065ef6db15

  • Size

    373KB

  • Sample

    241111-cy2qjstpaq

  • MD5

    3010f2b73c09777fec578b248eca123d

  • SHA1

    1a4f5a89118fe616f6293914bbe9906acf8e2a52

  • SHA256

    b5813d6b0ff1b99582c79224a89fbf1e9d4aec1cfc47dadc54fc1f065ef6db15

  • SHA512

    cb0eb3bf171b91fa240903df8a651fae24ce787617211eff09a8d04aab57a969055f33a18e890b2382d4342fd78e052d7d4fb1d3c0a7aee6f420306605b2d3e2

  • SSDEEP

    6144:YhXf0bnpskXXaTI0vK8zG8SkIp2VGezmbY34Tih:YObnpLXuXvKYkkw/kR

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      b5813d6b0ff1b99582c79224a89fbf1e9d4aec1cfc47dadc54fc1f065ef6db15

    • Size

      373KB

    • MD5

      3010f2b73c09777fec578b248eca123d

    • SHA1

      1a4f5a89118fe616f6293914bbe9906acf8e2a52

    • SHA256

      b5813d6b0ff1b99582c79224a89fbf1e9d4aec1cfc47dadc54fc1f065ef6db15

    • SHA512

      cb0eb3bf171b91fa240903df8a651fae24ce787617211eff09a8d04aab57a969055f33a18e890b2382d4342fd78e052d7d4fb1d3c0a7aee6f420306605b2d3e2

    • SSDEEP

      6144:YhXf0bnpskXXaTI0vK8zG8SkIp2VGezmbY34Tih:YObnpLXuXvKYkkw/kR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks