General

  • Target

    2407f0d9b8a2d09858779c8e26825028140497fd73c444a79d6db6daf864ade4.exe

  • Size

    832KB

  • Sample

    241121-m9arbasclm

  • MD5

    44bd3d5a794b5a5bdb820840048d2417

  • SHA1

    d4a6b522895588789ab1abc9857c7d8eb3f635c3

  • SHA256

    2407f0d9b8a2d09858779c8e26825028140497fd73c444a79d6db6daf864ade4

  • SHA512

    680685a2473d3ade8ef24d15ea023387fb4debdc10fb122fdb867439d982612f8d5a315f1ed3909914b68df767747cea873be187357b74dc96e31bc09d00c634

  • SSDEEP

    12288:3aq8GgDyMO9nXgab/b8ZuAcY0V5gmdLPdXbDmehoC16OLhTHlGNmWjPd:3aq8pGHnQafAoPUyJ6LNmiV

Malware Config

Extracted

Family

redline

Botnet

@alternativshikk

C2

5.188.118.163:80

Attributes
  • auth_value

    9bde7608ef33d6cbd8c01687cdd53196

Targets

    • Target

      2407f0d9b8a2d09858779c8e26825028140497fd73c444a79d6db6daf864ade4.exe

    • Size

      832KB

    • MD5

      44bd3d5a794b5a5bdb820840048d2417

    • SHA1

      d4a6b522895588789ab1abc9857c7d8eb3f635c3

    • SHA256

      2407f0d9b8a2d09858779c8e26825028140497fd73c444a79d6db6daf864ade4

    • SHA512

      680685a2473d3ade8ef24d15ea023387fb4debdc10fb122fdb867439d982612f8d5a315f1ed3909914b68df767747cea873be187357b74dc96e31bc09d00c634

    • SSDEEP

      12288:3aq8GgDyMO9nXgab/b8ZuAcY0V5gmdLPdXbDmehoC16OLhTHlGNmWjPd:3aq8pGHnQafAoPUyJ6LNmiV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks