General

  • Target

    7a2b4640e8638fd1e01de663df3eb5ba91975a7bd1715282df6ba0a4be7a63d5.exe

  • Size

    175KB

  • Sample

    241111-xleepssqhv

  • MD5

    b9b469a975bb9cff8bc2cf11590870a2

  • SHA1

    9a5cde7c6578915ae1946c63fd0e74f659a77c45

  • SHA256

    7a2b4640e8638fd1e01de663df3eb5ba91975a7bd1715282df6ba0a4be7a63d5

  • SHA512

    fc5d4eaeeacb9a069d8f7f2a222a3598a0fb36ca5007d03da7c3c91489248d312378bd3eb7c12eed8e0fbf54a0cb6020f98f56c913b47a165896d03a25411435

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOU:mqZg/Z6XJIihh

Malware Config

Extracted

Family

redline

Botnet

from

C2

176.113.115.145:4125

Attributes
  • auth_value

    8633e283485822a4a48f0a41d5397566

Targets

    • Target

      7a2b4640e8638fd1e01de663df3eb5ba91975a7bd1715282df6ba0a4be7a63d5.exe

    • Size

      175KB

    • MD5

      b9b469a975bb9cff8bc2cf11590870a2

    • SHA1

      9a5cde7c6578915ae1946c63fd0e74f659a77c45

    • SHA256

      7a2b4640e8638fd1e01de663df3eb5ba91975a7bd1715282df6ba0a4be7a63d5

    • SHA512

      fc5d4eaeeacb9a069d8f7f2a222a3598a0fb36ca5007d03da7c3c91489248d312378bd3eb7c12eed8e0fbf54a0cb6020f98f56c913b47a165896d03a25411435

    • SSDEEP

      3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOU:mqZg/Z6XJIihh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks