General

  • Target

    053617b0b6792c186b554246f641983808d355f51eb7657ff9e2a7223bf9fb90.exe

  • Size

    406KB

  • Sample

    241122-3jfsmsyjcp

  • MD5

    0ebae9c17c5ed21b6ea8af071ea9ffab

  • SHA1

    c0e3602697e441851ed1e9b01c2ef5af33eddc0e

  • SHA256

    053617b0b6792c186b554246f641983808d355f51eb7657ff9e2a7223bf9fb90

  • SHA512

    46ad84b658097565bf2287773eb0787b3698fcc9c0ce308ddf0a65df9ec2f85939f581ea504c35b8da4893e861f4cc22084487d884f7ad37de592b5da29012c7

  • SSDEEP

    6144:89Ka0kXlt0izuYU13vvbG54WCD/vjx3MN4/QvR6ZaT8MBTH4aZ1JOLlUqK+Wy8K:8IaJYvDjWN44ZaI8wTHdxIlt3

Malware Config

Extracted

Family

redline

Botnet

NEWPUB1

C2

45.9.20.182:46792

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      053617b0b6792c186b554246f641983808d355f51eb7657ff9e2a7223bf9fb90.exe

    • Size

      406KB

    • MD5

      0ebae9c17c5ed21b6ea8af071ea9ffab

    • SHA1

      c0e3602697e441851ed1e9b01c2ef5af33eddc0e

    • SHA256

      053617b0b6792c186b554246f641983808d355f51eb7657ff9e2a7223bf9fb90

    • SHA512

      46ad84b658097565bf2287773eb0787b3698fcc9c0ce308ddf0a65df9ec2f85939f581ea504c35b8da4893e861f4cc22084487d884f7ad37de592b5da29012c7

    • SSDEEP

      6144:89Ka0kXlt0izuYU13vvbG54WCD/vjx3MN4/QvR6ZaT8MBTH4aZ1JOLlUqK+Wy8K:8IaJYvDjWN44ZaI8wTHdxIlt3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks