General

  • Target

    f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b

  • Size

    175KB

  • Sample

    241115-eenqpaskhn

  • MD5

    096476980714c11dcf53176dadab1db3

  • SHA1

    4ac1ac946b441c82dec0f71ceb8c5b28f91c707a

  • SHA256

    f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b

  • SHA512

    f5d88d06c4e580d1433da8d023f9a7f9c1e1f588822c8195b4300af986ff398400ffeb71a1d005dabb1157e88d6661a01cf0130b4806835155e3f77ce1b3f59a

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

Malware Config

Extracted

Family

redline

Botnet

from

C2

176.113.115.145:4125

Attributes
  • auth_value

    8633e283485822a4a48f0a41d5397566

Targets

    • Target

      f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b

    • Size

      175KB

    • MD5

      096476980714c11dcf53176dadab1db3

    • SHA1

      4ac1ac946b441c82dec0f71ceb8c5b28f91c707a

    • SHA256

      f8e95e21568225b09baf5ad26242dfd6eb6a25a29def67eb722874752532b76b

    • SHA512

      f5d88d06c4e580d1433da8d023f9a7f9c1e1f588822c8195b4300af986ff398400ffeb71a1d005dabb1157e88d6661a01cf0130b4806835155e3f77ce1b3f59a

    • SSDEEP

      3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks