General

  • Target

    4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe

  • Size

    434KB

  • Sample

    241120-1wltbavelm

  • MD5

    fc022ecf59aa3c02155f8c74b4caf9de

  • SHA1

    013c95d309f07197e468877d2f92cf603c454769

  • SHA256

    4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6

  • SHA512

    7d872f87bebe6da5f806ba07690b70011a7d13c70ef10331c9da6d9d3847b9289411fe3500c53905cd24a0580583e9abb76b1ab0ccc3adaa3e73f396bfae7421

  • SSDEEP

    6144:nZlPv35dIB1lrjcf5KYaa/jIimvOpxemxbMtW4:Zl335dIB1hof5KXa/tm62W4

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6.exe

    • Size

      434KB

    • MD5

      fc022ecf59aa3c02155f8c74b4caf9de

    • SHA1

      013c95d309f07197e468877d2f92cf603c454769

    • SHA256

      4c9c16c3ca350a6ea89f1c0d0d33e2cb92710813c7af20c8f87da34a449ec9a6

    • SHA512

      7d872f87bebe6da5f806ba07690b70011a7d13c70ef10331c9da6d9d3847b9289411fe3500c53905cd24a0580583e9abb76b1ab0ccc3adaa3e73f396bfae7421

    • SSDEEP

      6144:nZlPv35dIB1lrjcf5KYaa/jIimvOpxemxbMtW4:Zl335dIB1hof5KXa/tm62W4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks