General

  • Target

    4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2N.exe

  • Size

    175KB

  • Sample

    241111-e9sm5awpcl

  • MD5

    108655ecd4efa9c1bc4a7421b275efeb

  • SHA1

    a4aa1cf30978271285f025ad533eb349249d1a37

  • SHA256

    cbe52beac495c544032c1157de5077d58bce06283f23be2c65d77e90e7c4f8d7

  • SHA512

    96c7f5de5ce73efb8bf5b5dad17ffd6d7c5183ffb94ec21a2034c9c3b7944a1f140bad36c51d0bf9c74963c1e2d871b427b300f312565f915926fa3910264ef6

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOr:mqZg/Z6XJIihw

Malware Config

Extracted

Family

redline

Botnet

from

C2

176.113.115.145:4125

Attributes
  • auth_value

    8633e283485822a4a48f0a41d5397566

Targets

    • Target

      4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2N.exe

    • Size

      175KB

    • MD5

      108655ecd4efa9c1bc4a7421b275efeb

    • SHA1

      a4aa1cf30978271285f025ad533eb349249d1a37

    • SHA256

      cbe52beac495c544032c1157de5077d58bce06283f23be2c65d77e90e7c4f8d7

    • SHA512

      96c7f5de5ce73efb8bf5b5dad17ffd6d7c5183ffb94ec21a2034c9c3b7944a1f140bad36c51d0bf9c74963c1e2d871b427b300f312565f915926fa3910264ef6

    • SSDEEP

      3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOr:mqZg/Z6XJIihw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks