General

  • Target

    4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2N

  • Size

    175KB

  • Sample

    241112-p9bdystble

  • MD5

    157187c3a1b150e987c64115cfcf6f60

  • SHA1

    b34b9e45d28f7bb4ce36812bfb955b2432bba55b

  • SHA256

    4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2

  • SHA512

    317e39e8dfe3d0d66605643318412f9e1b80d889f7d0c8d72944ad35a8e93906e401fee1375d572f1d8fcc73c49993dc5c756b3eeb1c26fbda29fadcb52d7013

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

Malware Config

Extracted

Family

redline

Botnet

from

C2

176.113.115.145:4125

Attributes
  • auth_value

    8633e283485822a4a48f0a41d5397566

Targets

    • Target

      4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2N

    • Size

      175KB

    • MD5

      157187c3a1b150e987c64115cfcf6f60

    • SHA1

      b34b9e45d28f7bb4ce36812bfb955b2432bba55b

    • SHA256

      4858e4efb4000ef3c238ff0906542ef7db3779e4ba9ca1346e24105f584897a2

    • SHA512

      317e39e8dfe3d0d66605643318412f9e1b80d889f7d0c8d72944ad35a8e93906e401fee1375d572f1d8fcc73c49993dc5c756b3eeb1c26fbda29fadcb52d7013

    • SSDEEP

      3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks