General

  • Target

    c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3.exe

  • Size

    175KB

  • Sample

    241119-s3326sydkk

  • MD5

    ebd5904210e226710015d25c1226cb1e

  • SHA1

    6dd56234ff99eafd43d5a92ec0ca35b987da724a

  • SHA256

    c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3

  • SHA512

    6a7c2656ccccea8a3537b299e4b40046d99debd9be78728cd98cf916a52a692d19b90b8d3aabcdbdbf6e459bf107dae78f8ee1489caf58a3f891aeec7c487cd8

  • SSDEEP

    3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0h:4qZIpfEWYL/hkM

Malware Config

Extracted

Family

redline

Botnet

fuba

C2

193.56.146.11:4162

Attributes
  • auth_value

    43015841fc23c63b15ca6ffe1d278d5e

Targets

    • Target

      c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3.exe

    • Size

      175KB

    • MD5

      ebd5904210e226710015d25c1226cb1e

    • SHA1

      6dd56234ff99eafd43d5a92ec0ca35b987da724a

    • SHA256

      c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3

    • SHA512

      6a7c2656ccccea8a3537b299e4b40046d99debd9be78728cd98cf916a52a692d19b90b8d3aabcdbdbf6e459bf107dae78f8ee1489caf58a3f891aeec7c487cd8

    • SSDEEP

      3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0h:4qZIpfEWYL/hkM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks