General

  • Target

    b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4.exe

  • Size

    168KB

  • Sample

    241111-yprd4sykbk

  • MD5

    72361c8c159254d18d771bfef4230d99

  • SHA1

    7e75555d91c8397386a7a58c6f8cad7aa83f4262

  • SHA256

    b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4

  • SHA512

    a1f823e879dedbf1d7dffbfaf41e15230200fb1a06e221e09ce4625b2b1aa61b54bac0dc53c2c5d0db60b79efeb22f1e52ddabe3a99a05eab29fb7a14d6ecc6a

  • SSDEEP

    3072:uJaohQaSe5clFcb0iCKbqVsTQZxTcVL8e8h2d:uJteaSe5clhiVwxTcVLr

Malware Config

Extracted

Family

redline

Botnet

mazda

C2

217.196.96.56:4138

Attributes
  • auth_value

    3d2870537d84a4c6d7aeecd002871c51

Targets

    • Target

      b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4.exe

    • Size

      168KB

    • MD5

      72361c8c159254d18d771bfef4230d99

    • SHA1

      7e75555d91c8397386a7a58c6f8cad7aa83f4262

    • SHA256

      b9b4e33fb34c2aa2078ab419d91932c9656f380479488e1a34a00435f7a1a0b4

    • SHA512

      a1f823e879dedbf1d7dffbfaf41e15230200fb1a06e221e09ce4625b2b1aa61b54bac0dc53c2c5d0db60b79efeb22f1e52ddabe3a99a05eab29fb7a14d6ecc6a

    • SSDEEP

      3072:uJaohQaSe5clFcb0iCKbqVsTQZxTcVL8e8h2d:uJteaSe5clhiVwxTcVLr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks