General

  • Target

    acea12113b04cdecb9df70f4563c5d239fc9e9061559e73ba410b690a9f0df86.exe

  • Size

    175KB

  • Sample

    241119-h2z9sa1pev

  • MD5

    6330823530e46f56cf2c0f9c12162318

  • SHA1

    952611295987b774f0d1d40d8f99e8a3848694f1

  • SHA256

    acea12113b04cdecb9df70f4563c5d239fc9e9061559e73ba410b690a9f0df86

  • SHA512

    3d38275a8240f171c4fb5c715a0d1d5eec916fb3c4a86daa94ba7148ec5a9efabd75d3b367efb50dc63f206ed26043d05709357ff5a08a966aad0c26926c10f5

  • SSDEEP

    3072:VxqZWn7aNQYF8ZueD59IhmHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cac:fqZuZZIhc

Malware Config

Extracted

Family

redline

Botnet

muse

C2

176.113.115.145:4125

Attributes
  • auth_value

    b91988a63a24940038d9262827a5320c

Targets

    • Target

      acea12113b04cdecb9df70f4563c5d239fc9e9061559e73ba410b690a9f0df86.exe

    • Size

      175KB

    • MD5

      6330823530e46f56cf2c0f9c12162318

    • SHA1

      952611295987b774f0d1d40d8f99e8a3848694f1

    • SHA256

      acea12113b04cdecb9df70f4563c5d239fc9e9061559e73ba410b690a9f0df86

    • SHA512

      3d38275a8240f171c4fb5c715a0d1d5eec916fb3c4a86daa94ba7148ec5a9efabd75d3b367efb50dc63f206ed26043d05709357ff5a08a966aad0c26926c10f5

    • SSDEEP

      3072:VxqZWn7aNQYF8ZueD59IhmHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cac:fqZuZZIhc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks