General

  • Target

    2c4efdfb19431bd2ec167338854f543bbd8ab23006998655a3e873edb305dc17.exe

  • Size

    104KB

  • Sample

    241123-2mv63azqcy

  • MD5

    ba8b55a96e88ceaec6c2170b7b0a14b5

  • SHA1

    53fb893fa25cbf4adda4e0d8afdc017430fedcb4

  • SHA256

    2c4efdfb19431bd2ec167338854f543bbd8ab23006998655a3e873edb305dc17

  • SHA512

    bb1bc61f234afd2f5e0920bbbb0a0af6e245e04789a0dc5ce258513f18b8b9fa24c2aafb9448d7e14dedc0b1e6a3423b9654c05ff5c31771a87f5b76533dc1a2

  • SSDEEP

    3072:pag0s5bLjlp5qg0mJvVNbk7gMZPV4IJvBZn9Zq:xTbLjlp5qg0ENraDdvq

Malware Config

Extracted

Family

redline

Botnet

RooCrash V2.5

C2

92.246.89.23:21869

Attributes
  • auth_value

    de96507e639360f7a16601c22d57c808

Targets

    • Target

      2c4efdfb19431bd2ec167338854f543bbd8ab23006998655a3e873edb305dc17.exe

    • Size

      104KB

    • MD5

      ba8b55a96e88ceaec6c2170b7b0a14b5

    • SHA1

      53fb893fa25cbf4adda4e0d8afdc017430fedcb4

    • SHA256

      2c4efdfb19431bd2ec167338854f543bbd8ab23006998655a3e873edb305dc17

    • SHA512

      bb1bc61f234afd2f5e0920bbbb0a0af6e245e04789a0dc5ce258513f18b8b9fa24c2aafb9448d7e14dedc0b1e6a3423b9654c05ff5c31771a87f5b76533dc1a2

    • SSDEEP

      3072:pag0s5bLjlp5qg0mJvVNbk7gMZPV4IJvBZn9Zq:xTbLjlp5qg0ENraDdvq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks