General

  • Target

    5abee9b2d31a13ba5d9a461b99e1a1fa0751294b

  • Size

    362KB

  • Sample

    241111-gp8vqatlby

  • MD5

    9407ff46080d1a9500f5779a3de9fa6f

  • SHA1

    5abee9b2d31a13ba5d9a461b99e1a1fa0751294b

  • SHA256

    3c86da66d18f9ad40afc5f5d1fc626b2fe037b80bf7c5350d5408939f64bce9a

  • SHA512

    e29851d6ec50f6913f01891a5a2a00847156e3622ec58a54357782cc9ac40acfc814a57829616ad42ea913f895c5d101d4e9d9629c644ef59c080856114bc6f9

  • SSDEEP

    6144:NRt6kXv3GDGi7oRlucc27DsdvIkwse1UY03c5UHrhBdMtz6J84CXk3y7Wt:NRFf3GDGisRlucc27GgHS8YhzPJl4k3

Malware Config

Extracted

Family

redline

Botnet

iNerinoEU

C2

193.233.48.58:38989

Attributes
  • auth_value

    4536d7478dc495213e425f08d6e8e496

Targets

    • Target

      5abee9b2d31a13ba5d9a461b99e1a1fa0751294b

    • Size

      362KB

    • MD5

      9407ff46080d1a9500f5779a3de9fa6f

    • SHA1

      5abee9b2d31a13ba5d9a461b99e1a1fa0751294b

    • SHA256

      3c86da66d18f9ad40afc5f5d1fc626b2fe037b80bf7c5350d5408939f64bce9a

    • SHA512

      e29851d6ec50f6913f01891a5a2a00847156e3622ec58a54357782cc9ac40acfc814a57829616ad42ea913f895c5d101d4e9d9629c644ef59c080856114bc6f9

    • SSDEEP

      6144:NRt6kXv3GDGi7oRlucc27DsdvIkwse1UY03c5UHrhBdMtz6J84CXk3y7Wt:NRFf3GDGisRlucc27GgHS8YhzPJl4k3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks