General

  • Target

    cd502ec934781354dfbad45fa9b957f30c361defe8eda6b2e3175a1b1d9caedd

  • Size

    175KB

  • Sample

    241111-dv1vhs1khw

  • MD5

    ff10004be57ec3a0484f7eb1a0c40e45

  • SHA1

    645bee66b95783ac7db99ce9f34ab7dfb6e4c03f

  • SHA256

    cd502ec934781354dfbad45fa9b957f30c361defe8eda6b2e3175a1b1d9caedd

  • SHA512

    81ac62cd05fde0a6c8f1111bba6c28a2f5dfbbe2919a51360cf1adb5e072d63474a2f0a68853baf0cdd1b932c3f25623302ccf1000ae8cc1700058d504caadc6

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

Malware Config

Extracted

Family

redline

Botnet

from

C2

176.113.115.145:4125

Attributes
  • auth_value

    8633e283485822a4a48f0a41d5397566

Targets

    • Target

      cd502ec934781354dfbad45fa9b957f30c361defe8eda6b2e3175a1b1d9caedd

    • Size

      175KB

    • MD5

      ff10004be57ec3a0484f7eb1a0c40e45

    • SHA1

      645bee66b95783ac7db99ce9f34ab7dfb6e4c03f

    • SHA256

      cd502ec934781354dfbad45fa9b957f30c361defe8eda6b2e3175a1b1d9caedd

    • SHA512

      81ac62cd05fde0a6c8f1111bba6c28a2f5dfbbe2919a51360cf1adb5e072d63474a2f0a68853baf0cdd1b932c3f25623302ccf1000ae8cc1700058d504caadc6

    • SSDEEP

      3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks