General

  • Target

    c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382.exe

  • Size

    145KB

  • Sample

    241119-2g1jlatgnb

  • MD5

    8a99f530c362c5505e317697e90f6e98

  • SHA1

    050dff6f6cef53aa9dbb9d086ddbc653f27578ee

  • SHA256

    c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382

  • SHA512

    ee3765fab8126e290c497fa8963978604355e6184bd3bac31ccbd856b613dc6956f063025d9dfaa734f01e16d7548e4df51f42a2391acc1fc771c62a92e4f78f

  • SSDEEP

    3072:nV+m5czQmRS9I6E24dl3CZz3FhRZG8e8hTt:njKmE2WcTFhR8E

Malware Config

Extracted

Family

redline

Botnet

masta

C2

185.161.248.75:4132

Attributes
  • auth_value

    57f23b6b74d0f680c5a0c8ac9f52bd75

Targets

    • Target

      c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382.exe

    • Size

      145KB

    • MD5

      8a99f530c362c5505e317697e90f6e98

    • SHA1

      050dff6f6cef53aa9dbb9d086ddbc653f27578ee

    • SHA256

      c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382

    • SHA512

      ee3765fab8126e290c497fa8963978604355e6184bd3bac31ccbd856b613dc6956f063025d9dfaa734f01e16d7548e4df51f42a2391acc1fc771c62a92e4f78f

    • SSDEEP

      3072:nV+m5czQmRS9I6E24dl3CZz3FhRZG8e8hTt:njKmE2WcTFhR8E

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks