General

  • Target

    9f5363cc1ba95aad6af76d40a5a3ac96b543f032cbd4859e2ac212da14a239baN.exe

  • Size

    352KB

  • Sample

    241119-tdx1assphm

  • MD5

    3765d0545597ac3ad315070e2bda9080

  • SHA1

    f5826b5d5a1192736a7abbc3d168e52347e53ae3

  • SHA256

    9f5363cc1ba95aad6af76d40a5a3ac96b543f032cbd4859e2ac212da14a239ba

  • SHA512

    d622d8ae977d610dfbc0fc7b5eb356cbdaf657a94122432c9d2e77674d8a532189a56c384c7b1624172abfbec61ddf0cd4e8ee0eecaa925091aacc6de1b175aa

  • SSDEEP

    6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:CBZoJ3rU6RH/wjjGt

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      9f5363cc1ba95aad6af76d40a5a3ac96b543f032cbd4859e2ac212da14a239baN.exe

    • Size

      352KB

    • MD5

      3765d0545597ac3ad315070e2bda9080

    • SHA1

      f5826b5d5a1192736a7abbc3d168e52347e53ae3

    • SHA256

      9f5363cc1ba95aad6af76d40a5a3ac96b543f032cbd4859e2ac212da14a239ba

    • SHA512

      d622d8ae977d610dfbc0fc7b5eb356cbdaf657a94122432c9d2e77674d8a532189a56c384c7b1624172abfbec61ddf0cd4e8ee0eecaa925091aacc6de1b175aa

    • SSDEEP

      6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjt:CBZoJ3rU6RH/wjjGt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks