General

  • Target

    8835a6d6768086445de12ca304e50edf0cf04f94fb61bd2253af24663a78ca60

  • Size

    145KB

  • Sample

    241114-3yvkcavlbw

  • MD5

    e52bc89460c397ae442578dd9ce58914

  • SHA1

    d38027b1485a087be1cdcbe36f29ddb43c81c543

  • SHA256

    8835a6d6768086445de12ca304e50edf0cf04f94fb61bd2253af24663a78ca60

  • SHA512

    1e83c9d36c96a567164c97bdff886e5889b7d0d1a006a6dc406df58c5651b637fec0e25877a128d0bcebbfd9e9813ab2fe4f24f590a4a3ec8e4efc1ae24efb2e

  • SSDEEP

    3072:CV+m5cVQmRSxUV/vz6eBtdpPh3ZQ8e8hH:Cj4FnhJh3a

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Targets

    • Target

      8835a6d6768086445de12ca304e50edf0cf04f94fb61bd2253af24663a78ca60

    • Size

      145KB

    • MD5

      e52bc89460c397ae442578dd9ce58914

    • SHA1

      d38027b1485a087be1cdcbe36f29ddb43c81c543

    • SHA256

      8835a6d6768086445de12ca304e50edf0cf04f94fb61bd2253af24663a78ca60

    • SHA512

      1e83c9d36c96a567164c97bdff886e5889b7d0d1a006a6dc406df58c5651b637fec0e25877a128d0bcebbfd9e9813ab2fe4f24f590a4a3ec8e4efc1ae24efb2e

    • SSDEEP

      3072:CV+m5cVQmRSxUV/vz6eBtdpPh3ZQ8e8hH:Cj4FnhJh3a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks