General

  • Target

    743254c0d44ff5635ffb1921aa2f945287525b269c86508f4b6fbc756d001cce.exe

  • Size

    352KB

  • Sample

    241119-wa9k2ayfqd

  • MD5

    d50cf9efc357e5e0e3ba1889a1aa805e

  • SHA1

    15694be375bcc5748373eca3668d0328e13747a9

  • SHA256

    743254c0d44ff5635ffb1921aa2f945287525b269c86508f4b6fbc756d001cce

  • SHA512

    6a538a2d1db6aaab3e71c5164c74ce65ccec37278edffaf869ff0d9d1c49fe56be3d536b996fccfe4c5e2af64be65aa585352cc6004ad55d57c9c460844f826c

  • SSDEEP

    6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjtc:CBZoJ3rU6RH/wjjGtc

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      743254c0d44ff5635ffb1921aa2f945287525b269c86508f4b6fbc756d001cce.exe

    • Size

      352KB

    • MD5

      d50cf9efc357e5e0e3ba1889a1aa805e

    • SHA1

      15694be375bcc5748373eca3668d0328e13747a9

    • SHA256

      743254c0d44ff5635ffb1921aa2f945287525b269c86508f4b6fbc756d001cce

    • SHA512

      6a538a2d1db6aaab3e71c5164c74ce65ccec37278edffaf869ff0d9d1c49fe56be3d536b996fccfe4c5e2af64be65aa585352cc6004ad55d57c9c460844f826c

    • SSDEEP

      6144:CP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjtc:CBZoJ3rU6RH/wjjGtc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks