General

  • Target

    8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073.exe

  • Size

    405KB

  • Sample

    241122-ys8gsstmhl

  • MD5

    e0db0b915dfa63e4ed89cf5462f3f561

  • SHA1

    4ffcfe7170793e7f096f3fd6d9ce3a0dd069cf33

  • SHA256

    8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073

  • SHA512

    58a56463320e8ac596b40badb7d4357776cb7b3c845f549d845f4ecf5acf5a52358ef117c9736c03d2a8c4913204d284a1b73f8ae7bfff51c832bf1914eb8a5b

  • SSDEEP

    12288:9m4q/GxSh+9Dc+Y16CbZtIjR1A08BqR5jp:9bq/qtkzIjfA0eUp

Malware Config

Extracted

Family

redline

Botnet

mix23.10

C2

185.215.113.15:21508

Attributes
  • auth_value

    408e5b97cb89314de620529179330c9a

Targets

    • Target

      8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073.exe

    • Size

      405KB

    • MD5

      e0db0b915dfa63e4ed89cf5462f3f561

    • SHA1

      4ffcfe7170793e7f096f3fd6d9ce3a0dd069cf33

    • SHA256

      8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073

    • SHA512

      58a56463320e8ac596b40badb7d4357776cb7b3c845f549d845f4ecf5acf5a52358ef117c9736c03d2a8c4913204d284a1b73f8ae7bfff51c832bf1914eb8a5b

    • SSDEEP

      12288:9m4q/GxSh+9Dc+Y16CbZtIjR1A08BqR5jp:9bq/qtkzIjfA0eUp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks