General

  • Target

    e4a3f9abbd35f2dd065e1b8b8b2c938e254212811700da3e4bfc17bfcdf3494b.exe

  • Size

    103KB

  • Sample

    241123-px5r2avlhv

  • MD5

    2610283e2657fe416300a9336c1acb8b

  • SHA1

    e343d45228e6b4f503af60a61aa1c183a1d29e1c

  • SHA256

    e4a3f9abbd35f2dd065e1b8b8b2c938e254212811700da3e4bfc17bfcdf3494b

  • SHA512

    5498167645535a757d58df1af3fe5219ead21fe592b8ad886e8b9727fc61561401ff2ec0ce9095c1bb2f93d21d3a37cdb53b9037885fc1c77f55ae61a06a91ce

  • SSDEEP

    3072:GsN6IYEQ0ASNwr/vUwQ3dhReff6ub8PXXY:uSN2LtkXXY

Malware Config

Extracted

Family

redline

Botnet

builder

C2

65.108.14.118:53868

Attributes
  • auth_value

    0aa1accf6b8c22c36f0ecf0d20dd081e

Targets

    • Target

      e4a3f9abbd35f2dd065e1b8b8b2c938e254212811700da3e4bfc17bfcdf3494b.exe

    • Size

      103KB

    • MD5

      2610283e2657fe416300a9336c1acb8b

    • SHA1

      e343d45228e6b4f503af60a61aa1c183a1d29e1c

    • SHA256

      e4a3f9abbd35f2dd065e1b8b8b2c938e254212811700da3e4bfc17bfcdf3494b

    • SHA512

      5498167645535a757d58df1af3fe5219ead21fe592b8ad886e8b9727fc61561401ff2ec0ce9095c1bb2f93d21d3a37cdb53b9037885fc1c77f55ae61a06a91ce

    • SSDEEP

      3072:GsN6IYEQ0ASNwr/vUwQ3dhReff6ub8PXXY:uSN2LtkXXY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks