General

  • Target

    9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6.exe

  • Size

    169KB

  • Sample

    241118-ede26axene

  • MD5

    52f4f6fc1dc38ba19e32f9c41e87ed06

  • SHA1

    d87b31a7d6e2c817fd0e38a71ca348264c4a9a7f

  • SHA256

    9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6

  • SHA512

    147ccabcf032d1295c852af1116e079193370cf5396598af1745c0470a2815002e2fe9aff377c9c751aa870d6a453208deb98117b5de45343fe1cd08be2e0648

  • SSDEEP

    1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hkD:1jPQN93rUpXbqV4MoIsfcNmC8e8hkD

Malware Config

Extracted

Family

redline

Botnet

dante

C2

185.161.248.73:4164

Attributes
  • auth_value

    f4066af6b8a6f23125c8ee48288a3f90

Targets

    • Target

      9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6.exe

    • Size

      169KB

    • MD5

      52f4f6fc1dc38ba19e32f9c41e87ed06

    • SHA1

      d87b31a7d6e2c817fd0e38a71ca348264c4a9a7f

    • SHA256

      9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6

    • SHA512

      147ccabcf032d1295c852af1116e079193370cf5396598af1745c0470a2815002e2fe9aff377c9c751aa870d6a453208deb98117b5de45343fe1cd08be2e0648

    • SSDEEP

      1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hkD:1jPQN93rUpXbqV4MoIsfcNmC8e8hkD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks