General

  • Target

    574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578afN.exe

  • Size

    1015KB

  • Sample

    241113-v14a9swfql

  • MD5

    cd790e2d6b1254c880b774b57655fb50

  • SHA1

    ab136b01537b00e22f4ecbe8e57f42470bc2f08d

  • SHA256

    574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578af

  • SHA512

    36541d4b9358ac725bd3f563b8726749681f30b7dde72ebae8b19062cff109a27fcd6f9b89c3c0ee970dea2b570acadab308859c6923a1b21beb99b1688d7cdb

  • SSDEEP

    24576:ryTvvk1OfUhB9ifJdtnUqTC0vNjAJW4m:eTnk1+Uh7gTpTC8AF

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578afN.exe

    • Size

      1015KB

    • MD5

      cd790e2d6b1254c880b774b57655fb50

    • SHA1

      ab136b01537b00e22f4ecbe8e57f42470bc2f08d

    • SHA256

      574296c9a6f4c61b0a062f9f1e0589f3eeac8955202c4cd42dc21b86003578af

    • SHA512

      36541d4b9358ac725bd3f563b8726749681f30b7dde72ebae8b19062cff109a27fcd6f9b89c3c0ee970dea2b570acadab308859c6923a1b21beb99b1688d7cdb

    • SSDEEP

      24576:ryTvvk1OfUhB9ifJdtnUqTC0vNjAJW4m:eTnk1+Uh7gTpTC8AF

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks