General

  • Target

    17d0191eae85f3985280e3b8c49183434214fc33f0c6429608f2db684e49c475.exe

  • Size

    145KB

  • Sample

    241119-s1elssycrm

  • MD5

    717b85ae1a5e4f89262cab1ba2eda1ca

  • SHA1

    31ab13635cb5f450f61cc117a15a0219663f89ec

  • SHA256

    17d0191eae85f3985280e3b8c49183434214fc33f0c6429608f2db684e49c475

  • SHA512

    2a395820920933d174210b539f0d948af15f954e45d5425cf09b03c449242b2b58d94e22632d33a8d52a8e1254fcf46988905650bcb1c2fb2a26d216b315fddc

  • SSDEEP

    3072:eV+m5cVQmRSxk1dL0lzjiT9zhIZ18e8hrH:ej4wo9zhIPs

Malware Config

Extracted

Family

redline

Botnet

mixer

C2

185.161.248.75:4132

Attributes
  • auth_value

    3668eba4f0cb1021a9e9ed55e76ed85e

Targets

    • Target

      17d0191eae85f3985280e3b8c49183434214fc33f0c6429608f2db684e49c475.exe

    • Size

      145KB

    • MD5

      717b85ae1a5e4f89262cab1ba2eda1ca

    • SHA1

      31ab13635cb5f450f61cc117a15a0219663f89ec

    • SHA256

      17d0191eae85f3985280e3b8c49183434214fc33f0c6429608f2db684e49c475

    • SHA512

      2a395820920933d174210b539f0d948af15f954e45d5425cf09b03c449242b2b58d94e22632d33a8d52a8e1254fcf46988905650bcb1c2fb2a26d216b315fddc

    • SSDEEP

      3072:eV+m5cVQmRSxk1dL0lzjiT9zhIZ18e8hrH:ej4wo9zhIPs

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks