General

  • Target

    d5ec3cc7df6f9bd1e0142b5ebd4a5f514c1b9e9c41c8329a9f8006e71f44c96e.exe

  • Size

    352KB

  • Sample

    241119-myc3asvcje

  • MD5

    44094409d0018721012c6c381735b791

  • SHA1

    9dd33e0bbfbebbcbbd817d2aca85047a8f52053a

  • SHA256

    d5ec3cc7df6f9bd1e0142b5ebd4a5f514c1b9e9c41c8329a9f8006e71f44c96e

  • SHA512

    7580257ef71c74f34dd0b0013afd5ed8892043ca60260d886a495bb5007f80fb42f142fcd91e8dd3a07d7cb271d10bc33639225d5a7aa65d63c9b7992aae3521

  • SSDEEP

    6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+ZtkjtE:0BZoJ3rU6RH/wjjGtE

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      d5ec3cc7df6f9bd1e0142b5ebd4a5f514c1b9e9c41c8329a9f8006e71f44c96e.exe

    • Size

      352KB

    • MD5

      44094409d0018721012c6c381735b791

    • SHA1

      9dd33e0bbfbebbcbbd817d2aca85047a8f52053a

    • SHA256

      d5ec3cc7df6f9bd1e0142b5ebd4a5f514c1b9e9c41c8329a9f8006e71f44c96e

    • SHA512

      7580257ef71c74f34dd0b0013afd5ed8892043ca60260d886a495bb5007f80fb42f142fcd91e8dd3a07d7cb271d10bc33639225d5a7aa65d63c9b7992aae3521

    • SSDEEP

      6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+ZtkjtE:0BZoJ3rU6RH/wjjGtE

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks