General

  • Target

    e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31.exe

  • Size

    175KB

  • Sample

    241119-zrt4fstaqm

  • MD5

    fcb031ba8a29edd48511d6cd737514ad

  • SHA1

    9014e8eb72438b587a99a4adc398427172ebcc75

  • SHA256

    e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31

  • SHA512

    8087f74a6b337d10e9d8c626350ec99987268be80592ee07dce183d0981e0926741be8e236d301fef7bf5872cff4cf3d8bceccf5700aa88a4db543711374610e

  • SSDEEP

    3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuV:CqZk516LTTh7

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

193.233.20.32:4125

Attributes
  • auth_value

    1b692976ca991040f2e8890409c35142

Targets

    • Target

      e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31.exe

    • Size

      175KB

    • MD5

      fcb031ba8a29edd48511d6cd737514ad

    • SHA1

      9014e8eb72438b587a99a4adc398427172ebcc75

    • SHA256

      e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31

    • SHA512

      8087f74a6b337d10e9d8c626350ec99987268be80592ee07dce183d0981e0926741be8e236d301fef7bf5872cff4cf3d8bceccf5700aa88a4db543711374610e

    • SSDEEP

      3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuV:CqZk516LTTh7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks