General

  • Target

    7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205N.exe

  • Size

    176KB

  • Sample

    241119-jx9s4asbnb

  • MD5

    cf970b6c4340824bf9e7cf6eea9acc70

  • SHA1

    e81dbdae852b3c7c7c391cdf7351484e17f07285

  • SHA256

    7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205

  • SHA512

    a4307e199a226ba77e48c71cee1c38adda230ad527ff2f8510f47b057d738fbf63de7ae21af118680f4ab75e8e1ad2b7d365e21efae884b6c7900fa2413f8601

  • SSDEEP

    3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

Malware Config

Extracted

Family

redline

Botnet

spora

C2

176.113.115.145:4125

Attributes
  • auth_value

    441b39ab37774b2ca9931c31e1bc6071

Targets

    • Target

      7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205N.exe

    • Size

      176KB

    • MD5

      cf970b6c4340824bf9e7cf6eea9acc70

    • SHA1

      e81dbdae852b3c7c7c391cdf7351484e17f07285

    • SHA256

      7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205

    • SHA512

      a4307e199a226ba77e48c71cee1c38adda230ad527ff2f8510f47b057d738fbf63de7ae21af118680f4ab75e8e1ad2b7d365e21efae884b6c7900fa2413f8601

    • SSDEEP

      3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks