General

  • Target

    e97180329089e2fcab54f3b13ee0e2119bce03b543e6acd3ac3150c4cf49f679.exe

  • Size

    102KB

  • Sample

    241123-pxqywavlg1

  • MD5

    36690916b3311eaa120b26af58b7acc4

  • SHA1

    619343bbc8fb3eca9ee981f9aa9b2a0e8cc86b4d

  • SHA256

    e97180329089e2fcab54f3b13ee0e2119bce03b543e6acd3ac3150c4cf49f679

  • SHA512

    6eb5937941db522754483c11f134884e039fa0c2b7be0bd945b5a6598dc9a51fc972289182d295f9adf225a77f1cdd1539cbb1f7b58507842721ee792c70ab5b

  • SSDEEP

    1536:WXL7P/eRELohhEeIKqDwGNw6iFX/eUGNiTxCqbM6vkJljgb9Kl0rfWreN:WXL6RELHeiDwm4+N2cerk7IZr6eN

Malware Config

Extracted

Family

redline

Botnet

@addicatedd

C2

62.182.156.24:12780

Attributes
  • auth_value

    bb67ccc49d44343128ca161d7fe51029

Targets

    • Target

      e97180329089e2fcab54f3b13ee0e2119bce03b543e6acd3ac3150c4cf49f679.exe

    • Size

      102KB

    • MD5

      36690916b3311eaa120b26af58b7acc4

    • SHA1

      619343bbc8fb3eca9ee981f9aa9b2a0e8cc86b4d

    • SHA256

      e97180329089e2fcab54f3b13ee0e2119bce03b543e6acd3ac3150c4cf49f679

    • SHA512

      6eb5937941db522754483c11f134884e039fa0c2b7be0bd945b5a6598dc9a51fc972289182d295f9adf225a77f1cdd1539cbb1f7b58507842721ee792c70ab5b

    • SSDEEP

      1536:WXL7P/eRELohhEeIKqDwGNw6iFX/eUGNiTxCqbM6vkJljgb9Kl0rfWreN:WXL6RELHeiDwm4+N2cerk7IZr6eN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks