General

  • Target

    715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1N

  • Size

    843KB

  • Sample

    241113-p3nqpsscke

  • MD5

    d9e9faa87d2b4d2f82b2f9842306b5d0

  • SHA1

    b4d495e739080745ef74ca474b8c722f4f5ae82c

  • SHA256

    715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1

  • SHA512

    cba05534a4ccbbb7be1428c785d55bf94726a50977e85963effcd3b831cdee2cb2b2702993c7e74dcce5e96811a9855d0bb4d559e5df65c877909711b379e75a

  • SSDEEP

    24576:By2n1TWWleo1ikd2e2ya24Xo4M9pmsNUF:0UC+eox2e2qfN

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1N

    • Size

      843KB

    • MD5

      d9e9faa87d2b4d2f82b2f9842306b5d0

    • SHA1

      b4d495e739080745ef74ca474b8c722f4f5ae82c

    • SHA256

      715fe05b0bdce41a6c1997a99cac8b9d2ae7072c612faf7bc25f2a49145817d1

    • SHA512

      cba05534a4ccbbb7be1428c785d55bf94726a50977e85963effcd3b831cdee2cb2b2702993c7e74dcce5e96811a9855d0bb4d559e5df65c877909711b379e75a

    • SSDEEP

      24576:By2n1TWWleo1ikd2e2ya24Xo4M9pmsNUF:0UC+eox2e2qfN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks