General

  • Target

    e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0N.exe

  • Size

    169KB

  • Sample

    241113-jxg33s1mfj

  • MD5

    aa8f0056e86ff8f5143debd896b52770

  • SHA1

    7624468cf54650a011319fbd832831d16b99c347

  • SHA256

    e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0

  • SHA512

    582546a4ddd1154f4e9c09158cd306466f6d4bf59a345ed59b29e60f9c107eb989e4c000bfb801323a6af670bef18dce0ebfcab712571e09501328005a239aba

  • SSDEEP

    1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hk:1jPQN93rUpXbqV4MoIsfcNmC8e8hk

Malware Config

Extracted

Family

redline

Botnet

dante

C2

185.161.248.73:4164

Attributes
  • auth_value

    f4066af6b8a6f23125c8ee48288a3f90

Targets

    • Target

      e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0N.exe

    • Size

      169KB

    • MD5

      aa8f0056e86ff8f5143debd896b52770

    • SHA1

      7624468cf54650a011319fbd832831d16b99c347

    • SHA256

      e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0

    • SHA512

      582546a4ddd1154f4e9c09158cd306466f6d4bf59a345ed59b29e60f9c107eb989e4c000bfb801323a6af670bef18dce0ebfcab712571e09501328005a239aba

    • SSDEEP

      1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hk:1jPQN93rUpXbqV4MoIsfcNmC8e8hk

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks