General

  • Target

    23767a89a3ee8cebd36e352944a26221c725364ee50fdbf52e8d5e6c4294252e

  • Size

    273KB

  • Sample

    241111-grwceaxphl

  • MD5

    e54dd1a6b43123afc03ad48c23f2715a

  • SHA1

    2537e5f88b85f940d980d29361107a5cc859a599

  • SHA256

    23767a89a3ee8cebd36e352944a26221c725364ee50fdbf52e8d5e6c4294252e

  • SHA512

    f425aea8f5e6e418d0b7d0cac316af1aa05e7760c31758a59f91ba201c26723d1aea1b585214ae1c8fab264ec3c2960c5bd48604e538880aa4f7985f2fada134

  • SSDEEP

    6144:4NaRP7NZEBcSW2m0fMgJWyp+eOcFPsdwJPWDsP:4YRP7NcdW2tkgJWyM/wOsP

Malware Config

Extracted

Family

redline

Botnet

ruzki

C2

193.106.191.165:39482

Attributes
  • auth_value

    71a0558c0eea274a5bd617ea85786884

Targets

    • Target

      77c0b56c5ca9e4be75cf6e7a543c38ac630a7d9ba41ae0774f0f5142dbde99f4

    • Size

      354KB

    • MD5

      109a3339533b3e41209436ef5933d2b5

    • SHA1

      4d4e94364d6c4d994d83387e049f3d76984b993a

    • SHA256

      77c0b56c5ca9e4be75cf6e7a543c38ac630a7d9ba41ae0774f0f5142dbde99f4

    • SHA512

      6dd641ef4b346e1a74e93eea79c8af1c109b4093722694d25b44a2807b4d4a2d8051fd9a54725fdd72702ba49612b8d06e37662ddb0ef221c3191b7729bb3aba

    • SSDEEP

      6144:/figs7IdBDo/cSW2m0hMgJWyp+iOcHPsdMLrwVfEz:/az7IdadW2t+gJWyMPKf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks