General

  • Target

    5c5a4dc2d9589db82fd3b0d15d2302c78b19178ba40ae09becb1f5956e81b6ddN.exe

  • Size

    168KB

  • Sample

    241114-apzhqasbnk

  • MD5

    38bef20bd5232f8f35149a97c55e32b0

  • SHA1

    4c2a1a3a5aa173d561e8ecfb0152d5fc6c5a25f5

  • SHA256

    5c5a4dc2d9589db82fd3b0d15d2302c78b19178ba40ae09becb1f5956e81b6dd

  • SHA512

    200553fc7964f4de95da90fe5bde9a243af6873bd7118f49a041f52107438ddabecf87c8f4be5931468ae2391cfee0cb7dcb4bea3cf38d80d6ab58317c087a70

  • SSDEEP

    1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

Malware Config

Extracted

Family

redline

Botnet

most

C2

185.161.248.73:4164

Attributes
  • auth_value

    7da4dfa153f2919e617aa016f7c36008

Targets

    • Target

      5c5a4dc2d9589db82fd3b0d15d2302c78b19178ba40ae09becb1f5956e81b6ddN.exe

    • Size

      168KB

    • MD5

      38bef20bd5232f8f35149a97c55e32b0

    • SHA1

      4c2a1a3a5aa173d561e8ecfb0152d5fc6c5a25f5

    • SHA256

      5c5a4dc2d9589db82fd3b0d15d2302c78b19178ba40ae09becb1f5956e81b6dd

    • SHA512

      200553fc7964f4de95da90fe5bde9a243af6873bd7118f49a041f52107438ddabecf87c8f4be5931468ae2391cfee0cb7dcb4bea3cf38d80d6ab58317c087a70

    • SSDEEP

      1536:zR1B8iqlVZRGWcAL4rMeV0HB3PE3+GnTGqVkbutpPljdzXgPw83wYk58e8hp:9n8U0Z/EOVqV8OVdzXgPwL8e8hp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks