General

  • Target

    de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe

  • Size

    352KB

  • Sample

    241119-qg4epswmcs

  • MD5

    77122c30abf2c4be2fe62829c73d5fa0

  • SHA1

    011cdf731e44259cb71d742eed95d8823a754116

  • SHA256

    de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2

  • SHA512

    8d3b8d2cf1f72fb1b9ca05c5c5b9ad1ecef76923d0cead2fbc85d59b98c164db39c60852c918a728d8c8bafc02c0f4d0db216eb47f38194f655a8b1ad7c641b1

  • SSDEEP

    6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:0BZoJ3rU6RH/wjjGt

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2N.exe

    • Size

      352KB

    • MD5

      77122c30abf2c4be2fe62829c73d5fa0

    • SHA1

      011cdf731e44259cb71d742eed95d8823a754116

    • SHA256

      de316c37c9ba5a721825bd72e6d4ba7c51e692afce81fcd23b5d17442d751cc2

    • SHA512

      8d3b8d2cf1f72fb1b9ca05c5c5b9ad1ecef76923d0cead2fbc85d59b98c164db39c60852c918a728d8c8bafc02c0f4d0db216eb47f38194f655a8b1ad7c641b1

    • SSDEEP

      6144:0P5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:0BZoJ3rU6RH/wjjGt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks