General

  • Target

    991978662f0c92ed6380027bf1a26d90204610e9b5ff253dd928b6c643dc02ac.exe

  • Size

    168KB

  • Sample

    241112-xnsecaskem

  • MD5

    ac77b0940466adc39c414d701a8c64c1

  • SHA1

    f9fb765803e3f409e5108b8906dec025ca6fdf58

  • SHA256

    991978662f0c92ed6380027bf1a26d90204610e9b5ff253dd928b6c643dc02ac

  • SHA512

    9df90804441403c6b9570aca40d4ed2e8c5cbda7d9ec8c0cdeb779672a9904568fd783c2601a793faf1780adbb680b765e9c9afc13ef2f852675fa4599c805dc

  • SSDEEP

    1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hpc:9n8U0Z/EOVqV8OVdzXgPwL8e8hpc

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      991978662f0c92ed6380027bf1a26d90204610e9b5ff253dd928b6c643dc02ac.exe

    • Size

      168KB

    • MD5

      ac77b0940466adc39c414d701a8c64c1

    • SHA1

      f9fb765803e3f409e5108b8906dec025ca6fdf58

    • SHA256

      991978662f0c92ed6380027bf1a26d90204610e9b5ff253dd928b6c643dc02ac

    • SHA512

      9df90804441403c6b9570aca40d4ed2e8c5cbda7d9ec8c0cdeb779672a9904568fd783c2601a793faf1780adbb680b765e9c9afc13ef2f852675fa4599c805dc

    • SSDEEP

      1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hpc:9n8U0Z/EOVqV8OVdzXgPwL8e8hpc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks