General

  • Target

    58ab81af1166a172dfdff4ad94455539d4651f74398ca07b3db1432af0b021feN.exe

  • Size

    353KB

  • Sample

    241111-cyc27azmbw

  • MD5

    b8e5900afe2e993eba31d1635778c22c

  • SHA1

    705109c3dd4906de351097b104962611b55c9b38

  • SHA256

    9d31bcf1cec38e13d4940cde3c2141b5bb3a436474114f04f9dd03ea5b4c3af6

  • SHA512

    db16ac22444686e70f748bf11fe35cb0fb5ca83dcbd3bddf95af0873c3565669a08d7606756438489b79ca6b63ed7b7dd2d5db7449cee1d5b14d4035c0456e78

  • SSDEEP

    6144:JfDCa1x84a5e+bL+N6E0ZY93mrRqd1sMZtkjt/:JbCaX84k/L+Ny43mrR01sMGt/

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      58ab81af1166a172dfdff4ad94455539d4651f74398ca07b3db1432af0b021feN.exe

    • Size

      353KB

    • MD5

      b8e5900afe2e993eba31d1635778c22c

    • SHA1

      705109c3dd4906de351097b104962611b55c9b38

    • SHA256

      9d31bcf1cec38e13d4940cde3c2141b5bb3a436474114f04f9dd03ea5b4c3af6

    • SHA512

      db16ac22444686e70f748bf11fe35cb0fb5ca83dcbd3bddf95af0873c3565669a08d7606756438489b79ca6b63ed7b7dd2d5db7449cee1d5b14d4035c0456e78

    • SSDEEP

      6144:JfDCa1x84a5e+bL+N6E0ZY93mrRqd1sMZtkjt/:JbCaX84k/L+Ny43mrR01sMGt/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks